Exact-email lookup or the application user directory.

?email= returns at most one eligible user (active, verified, effective access) and never reveals whether other accounts exist; it requires an administering role unless the application allows member discovery. Without email the caller must administer the application; the directory lists every user with a grant of any status plus effective superadmins.