---
title: "List Scope Users"
method: GET
path: "/api/platform/scopes/{scope_kind}/{scope_id}/users"
tags: ["scope-principals"]
---

# List Scope Users

`GET /api/platform/scopes/{scope_kind}/{scope_id}/users`

List human users with reader-or-higher control-plane access on a scope.

Direct owner tuples (account admins) are always included, even when
ListUsers expansion would omit them.

## Path parameters

- `scope_kind` string, required
- `scope_id` string, required

## Query parameters

- `enrich` boolean — Resolve Auth0 display fields server-side. Defaults to false so clients can batch identity lookup separately after the FGA expansion returns.

## Response `200`

Successful Response

- ScopeUsersResponse — Users with effective control-plane access on a portfolio/account scope.
  - `users` ScopeReaderUser[]
    - `kind` 'user' | 'service_account' | 'group' | 'organization', required
    - `id` string, required
    - `role` 'reader' | 'editor' | 'owner' | 'data_reader' | 'data_editor' | 'data_owner', required
    - `displayName` string, nullable
    - `email` string, nullable
    - `picture` string, nullable
    - `directOwner` boolean
    - `organizationIds` string[]

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/gocrisp/apis/crisp-app-dock.md) · [All operations](https://skmtc.dev/gocrisp/apis/crisp-app-dock/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gocrisp/crisp-app-dock/revisions/e56bd3c1a9db/schema)