published on Thursday, Aug 20, 2026 by jschady
published on Thursday, Aug 20, 2026 by jschady
A User represents a human or system/service user with the ability to connect to Files.com via any of the available connectivity methods (unless restricted to specific protocols).
Users are associated with API Keys, SSH (SFTP) Keys, Notifications, Permissions, and Group memberships.
Authentication
The authenticationMethod property on a User determines exactly how that user can login and authenticate to their Files.com account. Files.com offers a variety of authentication methods to ensure flexibility, security, migration, and compliance.
These authentication methods can be configured during user creation and can be modified at any time by site administrators. The meanings of the available values are as follows:
password- Allows authentication via a password. If API Keys or SSH (SFTP) Keys are also configured, those can be used instead of the password. If Two Factor Authentication (2FA) methods are also configured, a valid 2nd factor is required in addition to the password.emailSignup- When set upon user creation, an email will be sent to the new user with a link for them to create their password. Once the user has created their password, their authentication type will change topassword.sso- Allows authentication via a linked Single Sign On provider. If API Keys or SSH (SFTP) Keys are also configured, those can be used instead of Single Sign On. If Two Factor Authentication (2FA) methods are also configured, a valid 2nd factor is required in addition to Single Sign On. When using this method, you must also provide a validssoStrategyIdto associate the User to the appropriate SSO provider.passwordWithImportedHash- Works like thepasswordmethod but allows importing a hashed password in MD5, SHA-1, or SHA-256 format. Provide the imported hash in the fieldimportedPasswordHash. Upon first use, the password will be converted to Files.com’s internal storage format and the authentication type will change topassword. Typically only used when migrating to Files.com from another MFT solution.none- Does not allow authentication via username and password, but does allow authentication via API Key or SSH (SFTP) Key. Typically only used for service users.passwordAndSshKey- Allows authentication only by providing a password and also a valid SSH (SFTP) Key in a single attempt. If API Keys are also configured, those can be used instead of the password and key combination. This method only works with (typically enterprise) SSH/SFTP clients capable of sending both authentication methods at once. Typically only used for service users.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as filescom from "pulumi-filescom";
const exampleUser = filescom.getUser({
id: 1,
});
import pulumi
import pulumi_filescom as filescom
example_user = filescom.get_user(id=1)
package main
import (
"github.com/jschady/pulumi-filescom/sdk/go/filescom"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := filescom.GetUser(ctx, &filescom.LookupUserArgs{
Id: 1,
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Filescom = Jschady.Filescom;
return await Deployment.RunAsync(() =>
{
var exampleUser = Filescom.GetUser.Invoke(new()
{
Id = 1,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.filescom.FilescomFunctions;
import com.pulumi.filescom.inputs.GetUserArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var exampleUser = FilescomFunctions.getUser(GetUserArgs.builder()
.id(1)
.build());
}
}
variables:
exampleUser:
fn::invoke:
function: filescom:getUser
arguments:
id: 1
pulumi {
required_providers {
filescom = {
source = "pulumi/filescom"
}
}
}
data "filescom_getuser" "exampleUser" {
id = 1
}
Using getUser
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getUser(args: GetUserArgs, opts?: InvokeOptions): Promise<GetUserResult>
function getUserOutput(args: GetUserOutputArgs, opts?: InvokeOutputOptions): Output<GetUserResult>def get_user(id: Optional[int] = None,
opts: Optional[InvokeOptions] = None) -> GetUserResult
def get_user_output(id: pulumi.Input[Optional[int]] = None,
opts: Optional[InvokeOutputOptions] = None) -> Output[GetUserResult]func LookupUser(ctx *Context, args *LookupUserArgs, opts ...InvokeOption) (*LookupUserResult, error)
func LookupUserOutput(ctx *Context, args *LookupUserOutputArgs, opts ...InvokeOption) LookupUserResultOutput> Note: This function is named LookupUser in the Go SDK.
public static class GetUser
{
public static Task<GetUserResult> InvokeAsync(GetUserArgs args, InvokeOptions? opts = null)
public static Output<GetUserResult> Invoke(GetUserInvokeArgs args, InvokeOptions? opts = null)
public static Output<GetUserResult> Invoke(GetUserInvokeArgs args, InvokeOutputOptions opts)
}public static CompletableFuture<GetUserResult> getUser(GetUserArgs args, InvokeOptions options)
public static Output<GetUserResult> getUser(GetUserArgs args, InvokeOptions options)
public static Output<GetUserResult> getUser(GetUserArgs args, InvokeOutputOptions options)
fn::invoke:
function: filescom:index/getUser:getUser
arguments:
# arguments dictionarydata "filescom_get_user" "name" {
# arguments
}The following arguments are supported:
- Id int
- User ID
- Id int
- User ID
- id number
- User ID
- id Integer
- User ID
- id number
- User ID
- id int
- User ID
- id Number
- User ID
getUser Result
The following output properties are available:
- Active2fa bool
- Is 2fa active for the user?
- Admin
Group List<int>Ids - List of group IDs of which this user is an administrator
- Ai
Assistant intPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- Allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- Api
Keys intCount - Number of API keys associated with this user
- Attachments
Permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - Authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- Authentication
Method string - How is this user authenticated?
- Avatar
Url string - URL holding the user's avatar
- Billable bool
- Is this a billable user record?
- Billing
Permission bool - Allow this user to perform operations on the account, payments, and invoices?
- Bypass
Site boolAllowed Ips - Allow this user to skip site-wide IP blacklists?
- Bypass
User boolLifecycle Rules - Exempt this user from user lifecycle rules?
- Company string
- User's company
- Created
At string - When this user was created
- Dav
Permission bool - Can the user connect with WebDAV?
- Days
Remaining intUntil Password Expire - Number of days remaining until password expires
- Default
Workspace intId - Workspace ID the user should land in by default when more than one Workspace is available.
- Desktop
Configuration intProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- Disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- Disabled
Expired boolOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- Email string
- User email address
- Externally
Managed bool - Is this user managed by a SsoStrategy?
- Filesystem
Layout string - File system layout
- First
Login stringAt - User's first login time
- Ftp
Permission bool - Can the user access with FTP/FTPS?
- Group
Ids string - Comma-separated list of group IDs of which this user is a member
- Header
Text string - Text to display to the user in the header of the UI
- Id int
- User ID
- Integration
Centric intProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- Language string
- Preferred language
- Last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- Last
Api stringUse At - User's most recent API use time
- Last
Dav stringLogin At - User's most recent login time via WebDAV
- Last
Desktop stringLogin At - User's most recent login time via Desktop app
- Last
Ftp stringLogin At - User's most recent login time via FTP
- Last
Login stringAt - User's most recent login time via any protocol
- Last
Protocol stringCipher - The most recent protocol and cipher used
- Last
Restapi stringLogin At - User's most recent login time via Rest API
- Last
Sftp stringLogin At - User's most recent login time via SFTP
- Last
Web stringLogin At - User's most recent login time via web
- Lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- Name string
- User's full name
- Notes string
- Any internal notes on the user
- Notification
Daily intSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- Notify
On boolAll Automation Failures - Should the user receive automation failures via email?
- Notify
On boolAll Expectation Failures - Should the user receive expectation failures and misses via email?
- Notify
On boolAll Pending Work Failures - Should the user receive pending work failures via email?
- Notify
On boolAll Siem Http Destination Failures - Should the user receive siem failures via email?
- Notify
On boolAll Site Warnings - Should the user receive site warnings via email?
- Notify
On boolAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- Notify
On boolAll Sync Failures - Should the user receive sync failures via email?
- Notify
On boolAll User Security Events - Should the user receive user security events via email?
- Office
Integration boolEnabled - Enable integration with Office for the web?
- Partner
Admin bool - Is this user a Partner administrator?
- Partner
Id int - Partner ID if this user belongs to a Partner
- Partner
Name string - Name of the Partner if this user belongs to a Partner
- Password
Expire stringAt - Password expiration datetime
- Password
Expired bool - Is user's password expired?
- Password
Set stringAt - Last time the user's password was set
- Password
Validity intDays - Number of days to allow user to use the same password
- Primary
Group intId - Primary group ID for Group Admin scoping
- Public
Keys intCount - Number of public keys associated with this user
- Readonly
Site boolAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- Receive
Admin boolAlerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- Require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - Require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- Require
Password boolChange - Is a password change required upon next user login?
- Responsible
Group intId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- Responsible
User intId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- Restapi
Permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- Self
Managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- Sftp
Permission bool - Can the user access with SFTP?
- Site
Admin bool - Is the user an administrator for this site?
- Site
Id int - Site ID
- Skip
Welcome boolScreen - Skip Welcome page in the UI?
- Ssl
Required string - SSL required setting
- Sso
Strategy intId - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- Time
Zone string - User time zone
- Type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - Type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - User
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- User
Root string - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- Username string
- User's username
- Workspace
Admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- Workspace
Id int - Workspace ID
- Active2fa bool
- Is 2fa active for the user?
- Admin
Group []intIds - List of group IDs of which this user is an administrator
- Ai
Assistant intPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- Allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- Api
Keys intCount - Number of API keys associated with this user
- Attachments
Permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - Authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- Authentication
Method string - How is this user authenticated?
- Avatar
Url string - URL holding the user's avatar
- Billable bool
- Is this a billable user record?
- Billing
Permission bool - Allow this user to perform operations on the account, payments, and invoices?
- Bypass
Site boolAllowed Ips - Allow this user to skip site-wide IP blacklists?
- Bypass
User boolLifecycle Rules - Exempt this user from user lifecycle rules?
- Company string
- User's company
- Created
At string - When this user was created
- Dav
Permission bool - Can the user connect with WebDAV?
- Days
Remaining intUntil Password Expire - Number of days remaining until password expires
- Default
Workspace intId - Workspace ID the user should land in by default when more than one Workspace is available.
- Desktop
Configuration intProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- Disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- Disabled
Expired boolOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- Email string
- User email address
- Externally
Managed bool - Is this user managed by a SsoStrategy?
- Filesystem
Layout string - File system layout
- First
Login stringAt - User's first login time
- Ftp
Permission bool - Can the user access with FTP/FTPS?
- Group
Ids string - Comma-separated list of group IDs of which this user is a member
- Header
Text string - Text to display to the user in the header of the UI
- Id int
- User ID
- Integration
Centric intProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- Language string
- Preferred language
- Last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- Last
Api stringUse At - User's most recent API use time
- Last
Dav stringLogin At - User's most recent login time via WebDAV
- Last
Desktop stringLogin At - User's most recent login time via Desktop app
- Last
Ftp stringLogin At - User's most recent login time via FTP
- Last
Login stringAt - User's most recent login time via any protocol
- Last
Protocol stringCipher - The most recent protocol and cipher used
- Last
Restapi stringLogin At - User's most recent login time via Rest API
- Last
Sftp stringLogin At - User's most recent login time via SFTP
- Last
Web stringLogin At - User's most recent login time via web
- Lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- Name string
- User's full name
- Notes string
- Any internal notes on the user
- Notification
Daily intSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- Notify
On boolAll Automation Failures - Should the user receive automation failures via email?
- Notify
On boolAll Expectation Failures - Should the user receive expectation failures and misses via email?
- Notify
On boolAll Pending Work Failures - Should the user receive pending work failures via email?
- Notify
On boolAll Siem Http Destination Failures - Should the user receive siem failures via email?
- Notify
On boolAll Site Warnings - Should the user receive site warnings via email?
- Notify
On boolAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- Notify
On boolAll Sync Failures - Should the user receive sync failures via email?
- Notify
On boolAll User Security Events - Should the user receive user security events via email?
- Office
Integration boolEnabled - Enable integration with Office for the web?
- Partner
Admin bool - Is this user a Partner administrator?
- Partner
Id int - Partner ID if this user belongs to a Partner
- Partner
Name string - Name of the Partner if this user belongs to a Partner
- Password
Expire stringAt - Password expiration datetime
- Password
Expired bool - Is user's password expired?
- Password
Set stringAt - Last time the user's password was set
- Password
Validity intDays - Number of days to allow user to use the same password
- Primary
Group intId - Primary group ID for Group Admin scoping
- Public
Keys intCount - Number of public keys associated with this user
- Readonly
Site boolAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- Receive
Admin boolAlerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- Require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - Require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- Require
Password boolChange - Is a password change required upon next user login?
- Responsible
Group intId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- Responsible
User intId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- Restapi
Permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- Self
Managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- Sftp
Permission bool - Can the user access with SFTP?
- Site
Admin bool - Is the user an administrator for this site?
- Site
Id int - Site ID
- Skip
Welcome boolScreen - Skip Welcome page in the UI?
- Ssl
Required string - SSL required setting
- Sso
Strategy intId - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- Time
Zone string - User time zone
- Type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - Type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - User
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- User
Root string - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- Username string
- User's username
- Workspace
Admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- Workspace
Id int - Workspace ID
- active2fa bool
- Is 2fa active for the user?
- admin_
group_ list(number)ids - List of group IDs of which this user is an administrator
- ai_
assistant_ numberpersonality_ id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed_
ips string - A list of allowed IPs if applicable. Newline delimited
- api_
keys_ numbercount - Number of API keys associated with this user
- attachments_
permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate_
until string - Scheduled Date/Time at which user will be deactivated
- authentication_
method string - How is this user authenticated?
- avatar_
url string - URL holding the user's avatar
- billable bool
- Is this a billable user record?
- billing_
permission bool - Allow this user to perform operations on the account, payments, and invoices?
- bypass_
site_ boolallowed_ ips - Allow this user to skip site-wide IP blacklists?
- bypass_
user_ boollifecycle_ rules - Exempt this user from user lifecycle rules?
- company string
- User's company
- created_
at string - When this user was created
- dav_
permission bool - Can the user connect with WebDAV?
- days_
remaining_ numberuntil_ password_ expire - Number of days remaining until password expires
- default_
workspace_ numberid - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop_
configuration_ numberprofile_ id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled_
expired_ boolor_ inactive - Computed property that returns true if user disabled or expired or inactive.
- email string
- User email address
- externally_
managed bool - Is this user managed by a SsoStrategy?
- filesystem_
layout string - File system layout
- first_
login_ stringat - User's first login time
- ftp_
permission bool - Can the user access with FTP/FTPS?
- group_
ids string - Comma-separated list of group IDs of which this user is a member
- header_
text string - Text to display to the user in the header of the UI
- id number
- User ID
- integration_
centric_ numberprofile_ id - Integration Centric Profile ID assigned directly to this user, if any.
- language string
- Preferred language
- last_
active_ stringat - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last_
api_ stringuse_ at - User's most recent API use time
- last_
dav_ stringlogin_ at - User's most recent login time via WebDAV
- last_
desktop_ stringlogin_ at - User's most recent login time via Desktop app
- last_
ftp_ stringlogin_ at - User's most recent login time via FTP
- last_
login_ stringat - User's most recent login time via any protocol
- last_
protocol_ stringcipher - The most recent protocol and cipher used
- last_
restapi_ stringlogin_ at - User's most recent login time via Rest API
- last_
sftp_ stringlogin_ at - User's most recent login time via SFTP
- last_
web_ stringlogin_ at - User's most recent login time via web
- lockout_
expires string - Time in the future that the user will no longer be locked out if applicable
- name string
- User's full name
- notes string
- Any internal notes on the user
- notification_
daily_ numbersend_ time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify_
on_ boolall_ automation_ failures - Should the user receive automation failures via email?
- notify_
on_ boolall_ expectation_ failures - Should the user receive expectation failures and misses via email?
- notify_
on_ boolall_ pending_ work_ failures - Should the user receive pending work failures via email?
- notify_
on_ boolall_ siem_ http_ destination_ failures - Should the user receive siem failures via email?
- notify_
on_ boolall_ site_ warnings - Should the user receive site warnings via email?
- notify_
on_ boolall_ sso_ failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify_
on_ boolall_ sync_ failures - Should the user receive sync failures via email?
- notify_
on_ boolall_ user_ security_ events - Should the user receive user security events via email?
- office_
integration_ boolenabled - Enable integration with Office for the web?
- partner_
admin bool - Is this user a Partner administrator?
- partner_
id number - Partner ID if this user belongs to a Partner
- partner_
name string - Name of the Partner if this user belongs to a Partner
- password_
expire_ stringat - Password expiration datetime
- password_
expired bool - Is user's password expired?
- password_
set_ stringat - Last time the user's password was set
- password_
validity_ numberdays - Number of days to allow user to use the same password
- primary_
group_ numberid - Primary group ID for Group Admin scoping
- public_
keys_ numbercount - Number of public keys associated with this user
- readonly_
site_ booladmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive_
admin_ boolalerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require_
login_ stringby - Require user to login by specified date otherwise it will be disabled.
- require_
password_ boolchange - Is a password change required upon next user login?
- responsible_
group_ numberid - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible_
user_ numberid - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi_
permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self_
managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- sftp_
permission bool - Can the user access with SFTP?
- site_
admin bool - Is the user an administrator for this site?
- site_
id number - Site ID
- skip_
welcome_ boolscreen - Skip Welcome page in the UI?
- ssl_
required string - SSL required setting
- sso_
strategy_ numberid - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time_
zone string - User time zone
- type_
of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type_
of2fa_ stringfor_ display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user_
home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user_
root string - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username string
- User's username
- workspace_
admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace_
id number - Workspace ID
- active2fa Boolean
- Is 2fa active for the user?
- admin
Group List<Integer>Ids - List of group IDs of which this user is an administrator
- ai
Assistant IntegerPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips String - A list of allowed IPs if applicable. Newline delimited
- api
Keys IntegerCount - Number of API keys associated with this user
- attachments
Permission Boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until String - Scheduled Date/Time at which user will be deactivated
- authentication
Method String - How is this user authenticated?
- avatar
Url String - URL holding the user's avatar
- billable Boolean
- Is this a billable user record?
- billing
Permission Boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site BooleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User BooleanLifecycle Rules - Exempt this user from user lifecycle rules?
- company String
- User's company
- created
At String - When this user was created
- dav
Permission Boolean - Can the user connect with WebDAV?
- days
Remaining IntegerUntil Password Expire - Number of days remaining until password expires
- default
Workspace IntegerId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration IntegerProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled Boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled
Expired BooleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- email String
- User email address
- externally
Managed Boolean - Is this user managed by a SsoStrategy?
- filesystem
Layout String - File system layout
- first
Login StringAt - User's first login time
- ftp
Permission Boolean - Can the user access with FTP/FTPS?
- group
Ids String - Comma-separated list of group IDs of which this user is a member
- header
Text String - Text to display to the user in the header of the UI
- id Integer
- User ID
- integration
Centric IntegerProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language String
- Preferred language
- last
Active StringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api StringUse At - User's most recent API use time
- last
Dav StringLogin At - User's most recent login time via WebDAV
- last
Desktop StringLogin At - User's most recent login time via Desktop app
- last
Ftp StringLogin At - User's most recent login time via FTP
- last
Login StringAt - User's most recent login time via any protocol
- last
Protocol StringCipher - The most recent protocol and cipher used
- last
Restapi StringLogin At - User's most recent login time via Rest API
- last
Sftp StringLogin At - User's most recent login time via SFTP
- last
Web StringLogin At - User's most recent login time via web
- lockout
Expires String - Time in the future that the user will no longer be locked out if applicable
- name String
- User's full name
- notes String
- Any internal notes on the user
- notification
Daily IntegerSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On BooleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On BooleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On BooleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On BooleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On BooleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On BooleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On BooleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On BooleanAll User Security Events - Should the user receive user security events via email?
- office
Integration BooleanEnabled - Enable integration with Office for the web?
- partner
Admin Boolean - Is this user a Partner administrator?
- partner
Id Integer - Partner ID if this user belongs to a Partner
- partner
Name String - Name of the Partner if this user belongs to a Partner
- password
Expire StringAt - Password expiration datetime
- password
Expired Boolean - Is user's password expired?
- password
Set StringAt - Last time the user's password was set
- password
Validity IntegerDays - Number of days to allow user to use the same password
- primary
Group IntegerId - Primary group ID for Group Admin scoping
- public
Keys IntegerCount - Number of public keys associated with this user
- readonly
Site BooleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin BooleanAlerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- require2fa String
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login StringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password BooleanChange - Is a password change required upon next user login?
- responsible
Group IntegerId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User IntegerId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission Boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed Boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission Boolean - Can the user access with SFTP?
- site
Admin Boolean - Is the user an administrator for this site?
- site
Id Integer - Site ID
- skip
Welcome BooleanScreen - Skip Welcome page in the UI?
- ssl
Required String - SSL required setting
- sso
Strategy IntegerId - SSO (Single Sign On) strategy ID for the user, if applicable.
- Boolean
- Is the user subscribed to the newsletter?
- String
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone String - User time zone
- type
Of2fa String - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa StringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user
Home String - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root String - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username String
- User's username
- workspace
Admin Boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id Integer - Workspace ID
- active2fa boolean
- Is 2fa active for the user?
- admin
Group number[]Ids - List of group IDs of which this user is an administrator
- ai
Assistant numberPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- api
Keys numberCount - Number of API keys associated with this user
- attachments
Permission boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- authentication
Method string - How is this user authenticated?
- avatar
Url string - URL holding the user's avatar
- billable boolean
- Is this a billable user record?
- billing
Permission boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site booleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User booleanLifecycle Rules - Exempt this user from user lifecycle rules?
- company string
- User's company
- created
At string - When this user was created
- dav
Permission boolean - Can the user connect with WebDAV?
- days
Remaining numberUntil Password Expire - Number of days remaining until password expires
- default
Workspace numberId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration numberProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled
Expired booleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- email string
- User email address
- externally
Managed boolean - Is this user managed by a SsoStrategy?
- filesystem
Layout string - File system layout
- first
Login stringAt - User's first login time
- ftp
Permission boolean - Can the user access with FTP/FTPS?
- group
Ids string - Comma-separated list of group IDs of which this user is a member
- header
Text string - Text to display to the user in the header of the UI
- id number
- User ID
- integration
Centric numberProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language string
- Preferred language
- last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api stringUse At - User's most recent API use time
- last
Dav stringLogin At - User's most recent login time via WebDAV
- last
Desktop stringLogin At - User's most recent login time via Desktop app
- last
Ftp stringLogin At - User's most recent login time via FTP
- last
Login stringAt - User's most recent login time via any protocol
- last
Protocol stringCipher - The most recent protocol and cipher used
- last
Restapi stringLogin At - User's most recent login time via Rest API
- last
Sftp stringLogin At - User's most recent login time via SFTP
- last
Web stringLogin At - User's most recent login time via web
- lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- name string
- User's full name
- notes string
- Any internal notes on the user
- notification
Daily numberSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On booleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On booleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On booleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On booleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On booleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On booleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On booleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On booleanAll User Security Events - Should the user receive user security events via email?
- office
Integration booleanEnabled - Enable integration with Office for the web?
- partner
Admin boolean - Is this user a Partner administrator?
- partner
Id number - Partner ID if this user belongs to a Partner
- partner
Name string - Name of the Partner if this user belongs to a Partner
- password
Expire stringAt - Password expiration datetime
- password
Expired boolean - Is user's password expired?
- password
Set stringAt - Last time the user's password was set
- password
Validity numberDays - Number of days to allow user to use the same password
- primary
Group numberId - Primary group ID for Group Admin scoping
- public
Keys numberCount - Number of public keys associated with this user
- readonly
Site booleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin booleanAlerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password booleanChange - Is a password change required upon next user login?
- responsible
Group numberId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User numberId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission boolean - Can the user access with SFTP?
- site
Admin boolean - Is the user an administrator for this site?
- site
Id number - Site ID
- skip
Welcome booleanScreen - Skip Welcome page in the UI?
- ssl
Required string - SSL required setting
- sso
Strategy numberId - SSO (Single Sign On) strategy ID for the user, if applicable.
- boolean
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone string - User time zone
- type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root string - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username string
- User's username
- workspace
Admin boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id number - Workspace ID
- active2fa bool
- Is 2fa active for the user?
- admin_
group_ Sequence[int]ids - List of group IDs of which this user is an administrator
- ai_
assistant_ intpersonality_ id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed_
ips str - A list of allowed IPs if applicable. Newline delimited
- api_
keys_ intcount - Number of API keys associated with this user
- attachments_
permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate_
until str - Scheduled Date/Time at which user will be deactivated
- authentication_
method str - How is this user authenticated?
- avatar_
url str - URL holding the user's avatar
- billable bool
- Is this a billable user record?
- billing_
permission bool - Allow this user to perform operations on the account, payments, and invoices?
- bypass_
site_ boolallowed_ ips - Allow this user to skip site-wide IP blacklists?
- bypass_
user_ boollifecycle_ rules - Exempt this user from user lifecycle rules?
- company str
- User's company
- created_
at str - When this user was created
- dav_
permission bool - Can the user connect with WebDAV?
- days_
remaining_ intuntil_ password_ expire - Number of days remaining until password expires
- default_
workspace_ intid - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop_
configuration_ intprofile_ id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled_
expired_ boolor_ inactive - Computed property that returns true if user disabled or expired or inactive.
- email str
- User email address
- externally_
managed bool - Is this user managed by a SsoStrategy?
- filesystem_
layout str - File system layout
- first_
login_ strat - User's first login time
- ftp_
permission bool - Can the user access with FTP/FTPS?
- group_
ids str - Comma-separated list of group IDs of which this user is a member
- header_
text str - Text to display to the user in the header of the UI
- id int
- User ID
- integration_
centric_ intprofile_ id - Integration Centric Profile ID assigned directly to this user, if any.
- language str
- Preferred language
- last_
active_ strat - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last_
api_ struse_ at - User's most recent API use time
- last_
dav_ strlogin_ at - User's most recent login time via WebDAV
- last_
desktop_ strlogin_ at - User's most recent login time via Desktop app
- last_
ftp_ strlogin_ at - User's most recent login time via FTP
- last_
login_ strat - User's most recent login time via any protocol
- last_
protocol_ strcipher - The most recent protocol and cipher used
- last_
restapi_ strlogin_ at - User's most recent login time via Rest API
- last_
sftp_ strlogin_ at - User's most recent login time via SFTP
- last_
web_ strlogin_ at - User's most recent login time via web
- lockout_
expires str - Time in the future that the user will no longer be locked out if applicable
- name str
- User's full name
- notes str
- Any internal notes on the user
- notification_
daily_ intsend_ time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify_
on_ boolall_ automation_ failures - Should the user receive automation failures via email?
- notify_
on_ boolall_ expectation_ failures - Should the user receive expectation failures and misses via email?
- notify_
on_ boolall_ pending_ work_ failures - Should the user receive pending work failures via email?
- notify_
on_ boolall_ siem_ http_ destination_ failures - Should the user receive siem failures via email?
- notify_
on_ boolall_ site_ warnings - Should the user receive site warnings via email?
- notify_
on_ boolall_ sso_ failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify_
on_ boolall_ sync_ failures - Should the user receive sync failures via email?
- notify_
on_ boolall_ user_ security_ events - Should the user receive user security events via email?
- office_
integration_ boolenabled - Enable integration with Office for the web?
- partner_
admin bool - Is this user a Partner administrator?
- partner_
id int - Partner ID if this user belongs to a Partner
- partner_
name str - Name of the Partner if this user belongs to a Partner
- password_
expire_ strat - Password expiration datetime
- password_
expired bool - Is user's password expired?
- password_
set_ strat - Last time the user's password was set
- password_
validity_ intdays - Number of days to allow user to use the same password
- primary_
group_ intid - Primary group ID for Group Admin scoping
- public_
keys_ intcount - Number of public keys associated with this user
- readonly_
site_ booladmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive_
admin_ boolalerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- require2fa str
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require_
login_ strby - Require user to login by specified date otherwise it will be disabled.
- require_
password_ boolchange - Is a password change required upon next user login?
- responsible_
group_ intid - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible_
user_ intid - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi_
permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self_
managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- sftp_
permission bool - Can the user access with SFTP?
- site_
admin bool - Is the user an administrator for this site?
- site_
id int - Site ID
- skip_
welcome_ boolscreen - Skip Welcome page in the UI?
- ssl_
required str - SSL required setting
- sso_
strategy_ intid - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- str
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time_
zone str - User time zone
- type_
of2fa str - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type_
of2fa_ strfor_ display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user_
home str - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user_
root str - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username str
- User's username
- workspace_
admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace_
id int - Workspace ID
- active2fa Boolean
- Is 2fa active for the user?
- admin
Group List<Number>Ids - List of group IDs of which this user is an administrator
- ai
Assistant NumberPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips String - A list of allowed IPs if applicable. Newline delimited
- api
Keys NumberCount - Number of API keys associated with this user
- attachments
Permission Boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until String - Scheduled Date/Time at which user will be deactivated
- authentication
Method String - How is this user authenticated?
- avatar
Url String - URL holding the user's avatar
- billable Boolean
- Is this a billable user record?
- billing
Permission Boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site BooleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User BooleanLifecycle Rules - Exempt this user from user lifecycle rules?
- company String
- User's company
- created
At String - When this user was created
- dav
Permission Boolean - Can the user connect with WebDAV?
- days
Remaining NumberUntil Password Expire - Number of days remaining until password expires
- default
Workspace NumberId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration NumberProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled Boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled
Expired BooleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- email String
- User email address
- externally
Managed Boolean - Is this user managed by a SsoStrategy?
- filesystem
Layout String - File system layout
- first
Login StringAt - User's first login time
- ftp
Permission Boolean - Can the user access with FTP/FTPS?
- group
Ids String - Comma-separated list of group IDs of which this user is a member
- header
Text String - Text to display to the user in the header of the UI
- id Number
- User ID
- integration
Centric NumberProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language String
- Preferred language
- last
Active StringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api StringUse At - User's most recent API use time
- last
Dav StringLogin At - User's most recent login time via WebDAV
- last
Desktop StringLogin At - User's most recent login time via Desktop app
- last
Ftp StringLogin At - User's most recent login time via FTP
- last
Login StringAt - User's most recent login time via any protocol
- last
Protocol StringCipher - The most recent protocol and cipher used
- last
Restapi StringLogin At - User's most recent login time via Rest API
- last
Sftp StringLogin At - User's most recent login time via SFTP
- last
Web StringLogin At - User's most recent login time via web
- lockout
Expires String - Time in the future that the user will no longer be locked out if applicable
- name String
- User's full name
- notes String
- Any internal notes on the user
- notification
Daily NumberSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On BooleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On BooleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On BooleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On BooleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On BooleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On BooleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On BooleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On BooleanAll User Security Events - Should the user receive user security events via email?
- office
Integration BooleanEnabled - Enable integration with Office for the web?
- partner
Admin Boolean - Is this user a Partner administrator?
- partner
Id Number - Partner ID if this user belongs to a Partner
- partner
Name String - Name of the Partner if this user belongs to a Partner
- password
Expire StringAt - Password expiration datetime
- password
Expired Boolean - Is user's password expired?
- password
Set StringAt - Last time the user's password was set
- password
Validity NumberDays - Number of days to allow user to use the same password
- primary
Group NumberId - Primary group ID for Group Admin scoping
- public
Keys NumberCount - Number of public keys associated with this user
- readonly
Site BooleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin BooleanAlerts - Deprecated. Use notifyonallsitewarnings and granular failure notification preferences instead.
- require2fa String
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login StringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password BooleanChange - Is a password change required upon next user login?
- responsible
Group NumberId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User NumberId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission Boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed Boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission Boolean - Can the user access with SFTP?
- site
Admin Boolean - Is the user an administrator for this site?
- site
Id Number - Site ID
- skip
Welcome BooleanScreen - Skip Welcome page in the UI?
- ssl
Required String - SSL required setting
- sso
Strategy NumberId - SSO (Single Sign On) strategy ID for the user, if applicable.
- Boolean
- Is the user subscribed to the newsletter?
- String
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone String - User time zone
- type
Of2fa String - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa StringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user
Home String - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root String - If filesystem layout is userroot, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteroot or partnerroot, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerroot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username String
- User's username
- workspace
Admin Boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id Number - Workspace ID
Package Details
- Repository
- filescom jschady/pulumi-filescom
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
filescomTerraform Provider.
published on Thursday, Aug 20, 2026 by jschady