---
title: "Get User session and roles details"
method: GET
path: "/v1/user_details"
tags: ["Authorization"]
---

# Get User session and roles details

`GET /v1/user_details`

User access details provided a valid token 1) use the authToken API to generate a new token The refreshed token will also expire after an hour, refer to expires_at in the response for the validity of the token. When the refreshed token also expires, call again the refreshToken API to extend it further. Like wise a token can extended 3 times, refer to refresh_count in the response. After 3 refresh attempts, token will expire and cannot be extended any further. Need to use authToken API to generate a new token.

## Response `200`

Success

- AuthDetailedResponse
  - `auth_type` string, required — Authentication type.
  - `require_access_key` boolean, required — Whether access key required.
  - `account_id` string, required — Account id.
  - `is_account_admin` boolean, required — Whether account admin or not.
  - `header_logo` string, required — Header logo.
  - `banner_logo` string, required — Banner logo.
  - `user` UserModel, required
    - `name` string, required — Name of the user.
    - `id` string, required — Id of the user. This will be used for performing user level operations such as getUser, changePassword and so on.
    - `email` string, required — Email Id of the user. This wil be unique.
    - `active_tenant_id` string, required — Active tenant id.
    - `timezone` TimezoneModel, required
      - `id` string, required — Id of the Timezone such as Asia/Kolkata, Asia/Dubai and so on.
      - `raw_offset` string, required — Raw offset of the timezone. It means the amount of time in milliseconds to add to UTC to get standard time in the required time zone.
    - `preferred_language` 'en' | 'ja' — Preferred language of the user.
    - `mcp_server_enabled` boolean, required — Checks if the account is mcp server enabled or not
    - `mfa_enabled` string, required — Checks if the account is mfa enabled or not
    - `master_account_id` string, required — Master Account ID of the user.
    - `master_account_name` string, required — Master Account Name of the user.
    - `products` string[] — Products enabled in the master account
    - `crm_id` string — Customer Relationship Management ID
    - `master_account_ids` string[] — list of master account ids
  - `auth_method` string, required — Authentication method.
  - `tenants` DetailTenantModel[], required — Tenants list.
    - `id` string, required — Id of the tenant. This will be used for performing tenant level operations such as createPolicy, createScript, onboardCloudAccount and so on.
    - `name` string, required — Unique name of the tenant provided as input when creating.
    - `roles` Role[], required — Roles for a particular tenant
      - `id` string
      - `name` string
      - `role_type` string
    - `is_default` boolean, required — If user created under particular tenant it will be set to True or else False
    - `service_accounts` string[], required — Entitlements for a particular tenant
    - `policy` object, required — Policy for a particular tenant
    - `services` object, required — Services applicable for a particular tenant
    - `dimension_settings` DimensionTenantSettings[] — Dimension settings for a particular tenant
      - `product` 'AppSecOps' | 'Assessments' | 'CloudOps' | 'FinOps' | 'Product_Admin' | 'SecOps' | 'Self Service' | 'StackOps', required — Name of the product
      - `mandate_dimension_selection` boolean — Mandate Dimension Selection
  - `audit` AuditModel
    - `enabled` boolean — Whether audit log is enabled or not.
    - `audit_level` string — Audit log level.
  - `cost_unit` string, required — Constant unit.
  - `subscription_details` object, required — Subscription details.
  - `is_product_admin` boolean, required — Whether Product admin or not.
  - `token` Authorization, required
    - `issued_at` string, required — DateTime in UTC when the token was issued.
    - `expires_at` string, required — Token expiry datetime in UTC.
    - `access_token` string, required — This will be used as X-Auth-Token in all other APIs.
  - `cost_currency` string, required — Cost currency.
  - `footer_text` string, required — Footer text.
  - `user_guide_url` string — User Guide URL
  - `support_url` string — Support URL
  - `terms_and_conditions_url` string — Terms and Conditions URL

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal Server Error

---

[API](https://skmtc.dev/corestack/apis/corestack-external-api.md) · [All operations](https://skmtc.dev/corestack/apis/corestack-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/corestack/corestack-external-api/revisions/bf2cdf20826d/schema)