> For the complete documentation index, see [llms.txt](https://docs.fylr.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fylr.io/for-developers/api/endpoints/api-user.md).

# /api/v1/user

Manage user accounts. The required rights differ per operation: listing and reading users need only an authenticated session (reading the password hash via `include_password` requires `system.root`); creating or updating users is governed by a per-user save-right check (a user may save their own record, but changing a protected field of it — email, `_acl`, `_system_rights`, `_password`, … — still requires the corresponding right); deleting a user requires the `system.user` system right (or `system.root`); and changing the password requires the `system.user.change_password` system right (or `system.root`). Some properties additionally require `system.root`.

### `GET /user` — List all users visible to the authenticated user.

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user" method="get" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}

### `POST /user` — Create or update one or more users.

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user" method="post" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}

### `PUT /user` — Create or update one or more users (alias for POST).

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user" method="put" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}

### `GET /user/session` — Information about the current session.

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user/session" method="get" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}

### `POST /user/change_password` — Change the authenticated user's password.

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user/change\_password" method="post" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}

### `GET /user/{id}` — Retrieve a single user by id.

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user/{id}" method="get" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}

### `DELETE /user/{id}` — Delete a user by id.

{% openapi src="/files/kfiDjhyZfEICNBmt5f49" path="/user/{id}" method="delete" %}
[fylr-openapi.yml](https://4100607288-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAdRFzQASDY2Elfdm3wXW%2Fuploads%2Fgit-blob-27a76749464f8079ac8ce2ee65518544084ed6fa%2Ffylr-openapi.yml?alt=media)
{% endopenapi %}