---
title: "List of all employer users for the provider"
method: GET
path: "/v2/providers/{providerId}/employers/users"
tags: ["Employer user"]
---

# List of all employer users for the provider

`GET /v2/providers/{providerId}/employers/users`

## Request

- Base URL: `https://api.loket.nl`
- URL: `https://api.loket.nl/v2/providers/{providerId}/employers/users`
- Auth: none required

__Activity name :__ GetEmployerUsersByProviderId


 Get the list of all employer users of the provider

## Path parameters

- `providerId` string, uuid, required

## Query parameters

- `filter` string
- `orderBy` string
- `pageNumber` integer
- `pageSize` integer

## Headers

- `Authorization` string, required
- `Accept` string, required

## Response `200`

OK

- object: a warning indacateds that the given payload is valide, however take notice of the warning this might ifluence behavour.
  - `totalSize` integer: Total number of records, taking into account the given filter.
  - `pageSize` integer: Number of records in the response
  - `totalPages` integer: Number of pages available
  - `currentPage` integer: Current page returned in the response
  - `version` Version
    - `obsoleteDate` string, date, nullable: The date (can be null) on which the `resourceVersion` is no longer supported/available
    - `resourceVersion` string, date: The resource version of the object in the response
  - `messages` object[]
    - `type` string: Indication of the type of message. See [the general documentation for more information](./#section/Response/Messages)
    - `description` string: Describes the message
    - `id` string, uuid, nullable: In some cases when the message may relate to a specific entity, or specific group of entities, this field provides the identifier of that entity
    - `code` integer: Identifying code for the message
    - `properties` string[]: An array that can contain additional information
  - `_embedded` AllEmployerUsersForAProvider[]
    - `employerUser` object
      - `id` string, uuid: The unique identifier of an object (GUID/UUID)
      - `loginMethod` LoginMethod: The allowedlogin method for the user
        - `key` integer
        - `value` string
      - `personalDetails` object
        - `firstName` string, nullable: The first name of the user
        - `initials` string: The initials of the user
        - `prefix` string, nullable: The prefix of the user
        - `lastName` string: The last name of the user
      - `contactInformation` ContactInformation4
        - `placeOfEmployment` string, nullable: The place of employment (standplaats) for the user.
        - `phoneNumber` string, nullable: The phone number of the user.
        - `emailAddress` string: The e-mail address of the user.
      - `userSpecifiedRole` UserSpecifiedRole, nullable: The Role which the user has specified.
        - `key` integer
        - `value` string
      - `userCustomSpecifiedRole` string, nullable: Further specification of the user role.
      - `hasAccessToPayrollingTestData` boolean: Indicates if the user has access to data for payrolling test years
      - `accessStatus` AccessStatus: indicates the access status of the user.
        - `key` integer
        - `value` string
      - `hasMultiFactorAuthentication` boolean: Indicates if the user has multi factor authentication enabled Can only be changed from true to false.
      - `twoFactorAuthenticationRequired` boolean: Indicates whether two factor authentication is required for the user. This setting is only available for login method: Via website en SSO
      - `azureActiveDirectory` AzureActiveDirectory2, nullable
        - `tenant` object: The Azure AD tennant
          - `id` string, uuid: Id for the tennant
          - `description` string
          - `tenantRegistrationLevel` 'provider' | 'employer'
        - `userId` string: The userId as known in the Azure AD of the selected tennant
      - `userName` string, nullable: The username
      - `isDepartmentManager` boolean: Indicates if the user is a department manager
      - `isLinkedToMultipleEmployers` boolean: Indicates if the user has access to multiple employer.
      - `hasIntegrations` boolean: Indicates if the user has integrations with clients other that Loket. This means that another application can call the loket API using this user.
      - `hasConnectedApplications` boolean: Indicates if the user has connected applications.In this case a conection was made where loket can call the external softwares api to read and/or write data for that system.
      - `dateTimeLastLogin` string, date-time, nullable: The date on which the user loged in for the last time
      - `dateTimeCreation` string, date-time: The date on which the user was created
      - `authorizationSet` AuthorizationSet3, nullable: The authorization set for the user and employer combination.
        - `key` integer
        - `value` string
    - `employer` object
      - `id` string, uuid: The unique identifier of the employer
      - `companyName` string: Name of the company
      - `employerNumber` integer: The employer number is used in various overviews and exports to identify a specific employer in Loket (please note: this is not the identifier used in the REST API).
      - `providerSettings` object
        - `administrationNumber` string, nullable: A free field that is most commonly used to store the Debtors Number the provider uses for the employer. This field is used as a key field in some of the existing SOAP webservices.
        - `groupCode` integer, nullable: The groupcode is used for grouping employers. It is used for filtering output and processes (only include employers in group 40 in this report).

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error

---

[API](https://skmtc.dev/loket/apis/loket-api.md) - [All operations](https://skmtc.dev/loket/apis/loket-api/llms.txt) - [OpenAPI document](https://skmtc.dev/loket/apis/loket-api/revisions/32170564148f?raw)