---
title: "List Current Privileged Access User"
method: GET
path: "/privileged-access/users/self"
tags: ["Privileged Access"]
---

# List Current Privileged Access User

`GET /privileged-access/users/self`

## Request

- Base URL: `https://console.jumpcloud.com/api/v2`
- URL: `https://console.jumpcloud.com/api/v2/privileged-access/users/self`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/docs/privileged-access/users/self/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns the tenant user identified by request actor metadata (user_id / eventContext). Privileged Access counterpart of GetUser: the same tenant user, exposed under the privileged-access namespace and PAM feature flag, so PAM clients do not depend on a Password Vault route owned by another team.

## Response `200`

A successful response.

- JumpcloudPrivilegedAccessGetSelfUserReply: GetSelfUserReply mirrors GetUserReply. Kept as a distinct message so the two surfaces can diverge without one team's change breaking the other.
  - `adminExternalId` string
  - `emailAddress` string
  - `externalId` string
  - `id` integer
  - `isActive` boolean
  - `isDeleted` boolean
  - `isPamActivated` boolean
  - `isPwmActivated` boolean: True when the user is enrolled for PWM (AbpUsers.PwmActivated).
  - `isScim` boolean
  - `name` string
  - `surname` string
  - `userName` string

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/revisions/3f09fe63caaa?raw)