# One person in the organisation by id `GET /users/{id}` **Required scope:** `users:read` Same users:read scope and the same reasoning as GET /users. A user id from another organisation returns 404, not 403, so the endpoint cannot be used to test whether an id exists elsewhere. ## Parameters | Name | In | Required | Description | |---|---|---|---| | `id` | path | yes | id of the target record | ## Responses | Status | Meaning | |---|---| | `200` | Success Returns: name, email, role, suspended, createdAt, lastLogin. 404 for a user in another organisation, never 403. | | `400` | BadRequest | | `401` | Unauthorized | | `403` | Forbidden | | `429` | RateLimited | ## Example ```bash curl -X GET "https://backend.immut.io/api/v1/users/" \ -H "Authorization: Bearer $IMMUT_API_KEY" ``` ## OpenAPI fragment ```json { "/users/{id}": { "get": { "operationId": "getusersid", "summary": "One person in the organisation by id. Same users:read scope and the same reasoning as GET /users. A user id from another organisation returns 404, not 403, so the endpoint cannot be used to test whether an id exists elsewhere.", "description": "One person in the organisation by id. Same users:read scope and the same reasoning as GET /users. A user id from another organisation returns 404, not 403, so the endpoint cannot be used to test whether an id exists elsewhere.", "parameters": [ { "name": "id", "in": "path", "required": true, "schema": { "type": "string" }, "description": "id of the target record" } ], "responses": { "200": { "description": "Success Returns: name, email, role, suspended, createdAt, lastLogin. 404 for a user in another organisation, never 403." }, "400": { "$ref": "#/components/responses/BadRequest" }, "401": { "$ref": "#/components/responses/Unauthorized" }, "403": { "$ref": "#/components/responses/Forbidden" }, "429": { "$ref": "#/components/responses/RateLimited" } }, "x-required-scope": "users:read" } } } ```