CodeSign Secure Documentation
  • Overview
    • About CodeSign Secure
    • Getting Started
    • Documentation Guide
    • Portal Overview
    • Troubleshooting
      • FAQ
    • Glossary
  • Reference Guide
    • Header Bar
      • CodeSign Secure Documentation
      • Swagger API
      • Profile Section
    • Dashboard
      • Key Performance Indicators
      • Issued Certificates
      • Signatures Generated
      • HSM Health Check
    • Keys and Certificates
      • Key and Certificate Lifecycle
    • App Management
    • Signing Requests
      • Approval Workflows
    • Signing Tools
    • Reports
      • Signing Request Report
      • Audit Trail
      • Certificate Report
      • Client Report
    • Logs
    • System Setup
      • Identity Store
      • Backup
      • User
      • Roles and Permissions
      • Email
      • Signing Projects
      • SSL/TLS Management
      • Environment
      • Plugins
  • Setup & Architecture
    • Identity and Access Control
    • Architecture and Concepts
    • Installation
      • Windows
        • Installing the Server
        • Ports and Protocols
        • High Availability and Backup
        • Upgrades and Compatibility
    • Security
      • Security Hardening Checklist
      • Client Authentication
      • Designing Signing Policies
  • Release Notes
    • Releases for 2026
      • v3.2.1
    • Releases for 2025
      • v3.2.0
    • Releases for 2024
      • v3.1.0
  • API Reference
    • Getting Started
    • Authorizing Requests
    • Securing API Access
    • Request and Response Conventions
    • Endpoint Reference
      • Signing
      • Signing Requests
      • Certificates
      • Applications and Environments
      • User Management
      • Permissions
      • Email
      • System Setup
      • Reports
      • Dashboard
      • License
  • Integration Guides
    • Signing Capabilities
      • Supported Formats and Platforms
      • Timestamping
      • Windows Signing - SignTool
        • Signing
        • Macro Signing
      • Apple Signing
      • AppX & MSIX Signing
      • Visual Studio ClickOnce
      • Jar Signing
      • Sign HLK/HCK using CodeSign Secure
      • NuGet Signing
      • Mage Signing
      • Sign OVA/OVF using Encryption Consulting’s Utility Tool
      • Utility Tool for code signing
      • Container Signing
      • PKCS11 Wrapper
        • APK Signing
        • OpenSSL Signing
        • XML Signing
        • JSign Tool Signing
        • Jarsigner Signing
        • GPG2, Debian & RPM Signing
      • Reproducible Build
        • Automated Hash Validation
        • Reproducible Build Process Flow
        • Pipeline Script Components
        • Hash Validation
    • CI/CD Integration
      • GitHub Actions
      • Jenkins
      • GitLab
      • Azure DevOps
      • TeamCity
      • Bamboo
      • Securing CI/CD Credentials

User Management

The User Management endpoints list, create, get, and update users, and return the signed-in user.

For the corresponding user interface, refer to the System Setup > User section.

Endpoints

MethodEndpointDescription
GET/user_management/userList/List users
POST/user_management/userList/Create a user
GET/user_management/userList/{id}/Get a user
PUT/user_management/userList/{id}/Replace a user
PATCH/user_management/userList/{id}/Update a user
GET/user_management/userProfile/Get the signed-in user
GET /user_management/userList/

Returns the user accounts on the appliance with their roles and state.

Example Request

curl -X GET "https://<your domain>/api/user_management/userList/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /user_management/userList/

Creates a user account.

Request Body (application/json)

FieldTypeRequiredDescription
last_loginstring (date-time)NoLast login
is_superuserbooleanNoDesignates that this user has all permissions without explicitly assigning them.
usernamestringYesRequired. 150 characters or fewer. Letters, digits and @/./+/-/_ only.
first_namestringNoFirst name
last_namestringNoLast name
emailstring (email)NoEmail address
is_staffbooleanNoDesignates whether the user can log into this admin site.
is_activebooleanNoDesignates whether this user should be treated as active. Unselect this instead of deleting accounts.
date_joinedstring (date-time)NoDate joined
user_permissionsarray of integerNoSpecific permissions for this user.

Example Request

curl -X POST "https://<your domain>/api/user_management/userList/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"username":"string"}'

Responses

Status CodeDescription
201The operation completed.
GET /user_management/userList/{id}/

Returns one user account by identifier.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this user.

Example Request

curl -X GET "https://<your domain>/api/user_management/userList/<id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /user_management/userList/{id}/

Replaces a user account. Where the account holds team memberships or approvals, a replacement user may be named to inherit them.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this user.

Request Body (application/json)

FieldTypeRequiredDescription
last_loginstring (date-time)NoLast login
is_superuserbooleanNoDesignates that this user has all permissions without explicitly assigning them.
usernamestringYesRequired. 150 characters or fewer. Letters, digits and @/./+/-/_ only.
first_namestringNoFirst name
last_namestringNoLast name
emailstring (email)NoEmail address
is_staffbooleanNoDesignates whether the user can log into this admin site.
is_activebooleanNoDesignates whether this user should be treated as active. Unselect this instead of deleting accounts.
date_joinedstring (date-time)NoDate joined
user_permissionsarray of integerNoSpecific permissions for this user.

Example Request

curl -X PUT "https://<your domain>/api/user_management/userList/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"username":"string"}'

Responses

Status CodeDescription
200The record after the update.
PATCH /user_management/userList/{id}/

Updates selected fields of a user account. Send only the fields to change.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this user.

Request Body (application/json)

FieldTypeRequiredDescription
last_loginstring (date-time)NoLast login
is_superuserbooleanNoDesignates that this user has all permissions without explicitly assigning them.
usernamestringYesRequired. 150 characters or fewer. Letters, digits and @/./+/-/_ only.
first_namestringNoFirst name
last_namestringNoLast name
emailstring (email)NoEmail address
is_staffbooleanNoDesignates whether the user can log into this admin site.
is_activebooleanNoDesignates whether this user should be treated as active. Unselect this instead of deleting accounts.
date_joinedstring (date-time)NoDate joined
user_permissionsarray of integerNoSpecific permissions for this user.

Example Request

curl -X PATCH "https://<your domain>/api/user_management/userList/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"username":"string"}'

Responses

Status CodeDescription
200The record after the update.
GET /user_management/userProfile/

Returns the profile of the account the request is authenticated as.

Example Request

curl -X GET "https://<your domain>/api/user_management/userProfile/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
On this Page:
Support Privacy Policy Terms of Service

Copyright Encryption Consulting LLC. All rights reserved.