---
title: "List Privileged Access Users"
method: GET
path: "/api/v2/privileged-access/users"
tags: ["Privileged Access"]
---

# List Privileged Access Users

`GET /api/v2/privileged-access/users`

## Request

- Base URL: `https://console.jumpcloud.com`
- URL: `https://console.jumpcloud.com/api/v2/privileged-access/users`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/docs/api/v2/privileged-access/users/get.ts> (a function with typed inputs; its response is checked against the schema)

Lists tenant users, optionally filtered by role. Privileged Access counterpart of Find: the same VaultOne lookup, exposed under the privileged-access namespace and PAM feature flag, so PAM clients do not depend on a Password Vault route owned by another team. Filtering on role_filter ADMIN returns the administrators that resource manager membership accepts, and each result carries the VaultOne integer user id those writes require.

## Query parameters

- `filter` string[]
- `limit` integer
- `skip` integer
- `search` string
- `roleFilter` 'FIND_USERS_ROLE_FILTER_UNSPECIFIED' | 'FIND_USERS_ROLE_FILTER_USER' | 'FIND_USERS_ROLE_FILTER_ADMIN'

## Response `200`

A successful response.

- JumpcloudPrivilegedAccessFindPrivilegedAccessUsersReply: FindPrivilegedAccessUsersReply mirrors FindUsersReply.
  - `results` JumpcloudPrivilegedAccessPrivilegedAccessUserListItem[]
    - `emailAddress` string
    - `externalId` string
    - `id` integer
    - `isActive` boolean
    - `isDeleted` boolean
    - `isScim` boolean
    - `name` string
    - `surname` string
    - `userName` string
  - `totalCount` integer

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/revisions/f396d9271b46?raw)