Connectors
...
Actions
Get Users
4 min
description retrieves a list of wiz users filtered by role, authentication provider, or project assignments using specified variables endpoint method post inputs json body (object) – required variables (object) – required after (string) use as a pagination argument to refine your results use the value returned by pageinfo endcursor from the previous response filterby (object) role (array) filter by user role can be created by a user or built in authprovidertype (array) deleted (boolean) whether the user is deleted assignedprojects (array) filter users that are assigned (have access to) specific projects search (string) free text search on name, email title, or object name updatedat (object) – required after (string) datetime in iso 8601 format before (string) datetime in iso 8601 format output example \[ { "status code" 200, "response headers" { "date" "mon, 31 jul 2023 06 58 20 gmt", "content type" "application/json; charset=utf 8", "content length" "488", "connection" "keep alive", "content security policy" "default src 'self';base uri 'self';font src 'self' https data ;form action 'self';frame ancestors 'self';img src 'self' data ;object src 'none';script src 'self';script src attr 'none';style src 'self' https 'unsafe inline';upgrade insecure requests", "cross origin embedder policy" "require corp", "cross origin opener policy" "same origin", "cross origin resource policy" "same origin", "x dns prefetch control" "off", "x frame options" "sameorigin", "strict transport security" "max age=15552000; includesubdomains", "x download options" "noopen", "x content type options" "nosniff", "origin agent cluster" "?1", "x permitted cross domain policies" "none", "referrer policy" "no referrer", "x xss protection" "0", "vary" "origin, accept encoding", "access control allow credentials" "true", "etag" "w/\\"1e8 ewh1grk0z+dm0ykzi43g/dufote\\"" }, "reason" "ok", "json body" { "data" { "users" { "nodes" \[ { "id" "auth0|62aece0bf42ab612cb37e0d7", "name" "tivan", "email" "tivan bilder+integ\@wiz sec io", "lastloginat" "2022 06 19t08 01 40 593z", "issuspended" false, "createdat" "2022 06 19t07 19 39 613z", "identityprovider" null, "identityprovidertype" "wiz", "assignedprojects" null, "role" { "id" "global admin", "name" "globaladmin", "scopes" \[ "admin\ all", "create\ all", "delete\ all", "read\ all", "update\ all", "write\ all" ] } } ], "pageinfo" { "endcursor" null, "hasnextpage" false } } } } } ] output parameters status code (number) reason (string) json body (object) data (object) users (object) nodes (array) id (string) name (string) email (string) lastloginat (string) issuspended (boolean) createdat (string) identityprovider (object) identityprovidertype (string) assignedprojects (object) role (object) id (string) name (string) scopes (array) pageinfo (object) endcursor (object) hasnextpage (boolean) response headers header type date string content type string content length string connection string content security policy string cross origin embedder policy string cross origin opener policy string cross origin resource policy string x dns prefetch control string x frame options string strict transport security string x download options string x content type options string origin agent cluster string x permitted cross domain policies string referrer policy string x xss protection string vary string access control allow credentials string etag string