---
title: "Retrieves a user"
method: GET
path: "/settings/v3/users/{userId}"
tags: ["Users"]
---

# Retrieves a user

`GET /settings/v3/users/{userId}`

Retrieves a user identified by `userId`. `userId` refers to the user's ID by default, or optionally email as specified by the `IdProperty` query param.

## Path parameters

- `userId` string, required

## Query parameters

- `idProperty` 'EMAIL' | 'USER_ID'

## Response `200`

successful operation

- PublicUser
  - `email` string, required — The user's email.
  - `firstName` string — The user's first name.
  - `id` string, required — The user's unique ID.
  - `lastName` string — The user's last name.
  - `primaryTeamId` string — The user's primary team
  - `roleId` string — The user's role.
  - `roleIds` string[], required — A list of role IDs assigned to the user.
  - `seatNames` string[]
  - `secondaryTeamIds` string[] — The user's additional teams.
  - `sendWelcomeEmail` boolean — Whether a welcome email was sent to the user. This value will only be populated in response to a provisioning request. Subsequent queries will be false.
  - `superAdmin` boolean, required — Whether the user has super admin privileges.

## Other responses

- `default` — An error occurred.

## Changes

- **2026-08-17** (v3) `b5b726b64126` — 3 info
  - the security scope `settings.users.read` was added to the endpoint's security scheme `oauth2`
  - the security scope `crm.objects.users.read` was removed from the endpoint's security scheme `oauth2`
  - added the optional property `seatNames` to the response with the `200` status
- **2026-07-13** (v3) `0cf03274b2c8` — 1 info
  - endpoint added
- **2026-07-13** (v3) `88afd8abb54e` — 1 breaking
  - api path removed without deprecation
- **2026-06-15** (v3) `0cf03274b2c8` — 2 info
  - the security scope `settings.users.read` was added to the endpoint's security scheme `oauth2`
  - the security scope `crm.objects.users.read` was removed from the endpoint's security scheme `oauth2`
- **2026-06-15** (v3) `7742dcf4e0c9` — 2 info
  - the security scope `settings.users.read` was added to the endpoint's security scheme `oauth2`
  - the security scope `crm.objects.users.read` was removed from the endpoint's security scheme `oauth2`

[Full history](https://skmtc.dev/hubspot/apis/settings-user-provisioning/changes/settings/v3/users/:userId/get.md)

---

[API](https://skmtc.dev/hubspot/apis/settings-user-provisioning.md) · [All operations](https://skmtc.dev/hubspot/apis/settings-user-provisioning/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hubspot/settings-user-provisioning/revisions/b5b726b64126/schema)