Gravitee · Capability

Gravitee.io - Access Management API — user

Gravitee.io - Access Management API — user. 51 operations. Lead operation: List users for a security domain. Self-contained Naftiko capability covering one Gravitee business surface.

Run with Naftiko Graviteeuser

What You Can Do

GET

Listusers — List users for a security domain

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users

POST

Createuser — Create a user on the specified security domain

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users

POST

Bulkuseroperation — Create/update/delete multiple users on the specified security domain

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/bulk

GET

Finduser — Get a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}

PUT

Updateuser — Update a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}

DELETE

Deleteuser — Delete a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}

GET

Listuserauditlogs — Get a user audit logs

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/audits

GET

Getuserauditlog — Get a user audit log

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/audits/{audit}

GET

Listusercertificatecredentials — Get user certificate credentials

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/cert-credentials

POST

Enrollusercertificatecredential — Enroll a certificate credential for a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/cert-credentials

GET

Getusercertificatecredential — Get a user certificate credential

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/cert-credentials/{credential}

DELETE

Revokeusercertificatecredential — Revoke a user certificate credential

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/cert-credentials/{credential}

GET

Listuserconsents — Get a user consents

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/consents

DELETE

Revokeuserconsents — Revoke user consents

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/consents

GET

Getuserconsent — Get a user consent

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/consents/{consent}

DELETE

Revokeuserconsent — Revoke a user consent

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/consents/{consent}

GET

Listusercredentials — Get a user credentials

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/credentials

GET

Getusercredential — Get a user credential

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/credentials/{credential}

DELETE

Revokeusercredential — Revoke a user credential

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/credentials/{credential}

GET

Listuserdevices — List users for a security domain

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/devices

DELETE

Deleteuserdevice — Delete a device

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/devices/{device}

GET

Listuserenrolledfactors — Get a user enrolled factors

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/factors

DELETE

Deleteuserfactor — Revoke user factor

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/factors/{factor}

GET

Listuseridentities — Get a user linked identities

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/identities

DELETE

Unlinkuseridentity — Unlink user identity

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/identities/{identity}

POST

Lockuser — Lock a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/lock

POST

Resetpassword — Reset password

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/resetpassword

GET

Listuserroles — Get a user roles

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/roles

POST

Assignrolestouser — Assign roles to a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/roles

DELETE

Revokeuserrole — Revoke role to a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/roles/{role}

POST

Sendregistrationconfirmation — Send registration confirmation email

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/sendregistrationconfirmation

PUT

Updateuserstatus — Update a user status

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/status

POST

Unlockuser — Unlock a user

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/unlock

PATCH

Updateusername — Update a user username

/v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/username

GET

Listorganisationusers — List users of the organization

/v1/organizations/{organizationid}/users

POST

Createorganisationuser — Create a platform user or Service Account

/v1/organizations/{organizationid}/users

POST

Bulkorganisationuseroperation — Create/update/delete platform users or Service Accounts

/v1/organizations/{organizationid}/users/bulk

GET

Getorganizationuser — Get a user

/v1/organizations/{organizationid}/users/{user}

PUT

Updateorganizationuser — Update a user

/v1/organizations/{organizationid}/users/{user}

DELETE

Deleteorganizationuser — Delete a user

/v1/organizations/{organizationid}/users/{user}

POST

Resetorganizationuserpassword — Reset password

/v1/organizations/{organizationid}/users/{user}/resetpassword

PUT

Updateorganizationuserstatus — Update a user status

/v1/organizations/{organizationid}/users/{user}/status

GET

Getorganizationusertokens — Get tokens of a user

/v1/organizations/{organizationid}/users/{user}/tokens

POST

Createaccountaccesstoken — Generate an account access token for a user

/v1/organizations/{organizationid}/users/{user}/tokens

DELETE

Revokeaccountaccesstoken — Revoke an account access token

/v1/organizations/{organizationid}/users/{user}/tokens/{tokenid}

PATCH

Updateorganisationusername — Update a user username

/v1/organizations/{organizationid}/users/{user}/username

GET

Getcurrentuser — Get the current user

/v1/user

POST

Subscribenewsletter — Subscribe to the newsletter the authenticated user

/v1/user/newsletter/subscribe

GET

Gettaglines — Get taglines to display in the newsletter

/v1/user/newsletter/taglines

GET

Listnotifications — List notifications received by the current user

/v1/user/notifications

POST

Marknotificationasread — Mark User notification as read

/v1/user/notifications/{notificationid}/acknowledge

MCP Tools

list-users-security-domain

List users for a security domain

read-only idempotent

create-user-specified-security-domain

Create a user on the specified security domain

Get user certificate credentials

read-only idempotent

Lock a user

reset-password

Reset password

get-user-roles

Get a user roles

read-only idempotent

assign-roles-user

Assign roles to a user

revoke-role-user

Revoke role to a user

idempotent

send-registration-confirmation-email

Send registration confirmation email

update-user-status

Update a user status

idempotent

unlock-user

Unlock a user

update-user-username

Update a user username

idempotent

list-users-organization

List users of the organization

read-only idempotent

create-platform-user-service-account

Create a platform user or Service Account

create-update-delete-platform-users

Create/update/delete platform users or Service Accounts

get-user-2

get-current-user

Get the current user

read-only idempotent

subscribe-newsletter-authenticated-user

Subscribe to the newsletter the authenticated user

get-taglines-display-newsletter

Get taglines to display in the newsletter

read-only idempotent

list-notifications-received-current-user

List notifications received by the current user

read-only idempotent

mark-user-notification-read

Mark User notification as read

Capability Spec

naftiko: 1.0.0-alpha2
info:
  label: Gravitee.io - Access Management API — user
  description: 'Gravitee.io - Access Management API — user. 51 operations. Lead operation: List users for a security domain.
    Self-contained Naftiko capability covering one Gravitee business surface.'
  tags:
  - Gravitee
  - user
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    GRAVITEE_API_KEY: GRAVITEE_API_KEY
capability:
  consumes:
  - type: http
    namespace: am-user
    baseUri: ''
    description: Gravitee.io - Access Management API — user business capability. Self-contained, no shared references.
    resources:
    - name: organizations-organizationId-environments-environmentId-domains-domain-users
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users
      operations:
      - name: listusers
        method: GET
        description: List users for a security domain
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: q
          in: query
          type: string
        - name: filter
          in: query
          type: string
        - name: page
          in: query
          type: integer
        - name: size
          in: query
          type: integer
      - name: createuser
        method: POST
        description: Create a user on the specified security domain
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-bul
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/bulk
      operations:
      - name: bulkuseroperation
        method: POST
        description: Create/update/delete multiple users on the specified security domain
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}
      operations:
      - name: finduser
        method: GET
        description: Get a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
      - name: updateuser
        method: PUT
        description: Update a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteuser
        method: DELETE
        description: Delete a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/audits
      operations:
      - name: listuserauditlogs
        method: GET
        description: Get a user audit logs
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: type
          in: query
          type: string
        - name: status
          in: query
          type: string
        - name: from
          in: query
          type: integer
        - name: to
          in: query
          type: integer
        - name: size
          in: query
          type: integer
        - name: page
          in: query
          type: integer
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/audits/{audit}
      operations:
      - name: getuserauditlog
        method: GET
        description: Get a user audit log
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: audit
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/cert-credentials
      operations:
      - name: listusercertificatecredentials
        method: GET
        description: Get user certificate credentials
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
      - name: enrollusercertificatecredential
        method: POST
        description: Enroll a certificate credential for a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/cert-credentials/{credential}
      operations:
      - name: getusercertificatecredential
        method: GET
        description: Get a user certificate credential
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: credential
          in: path
          type: string
          required: true
      - name: revokeusercertificatecredential
        method: DELETE
        description: Revoke a user certificate credential
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: credential
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/consents
      operations:
      - name: listuserconsents
        method: GET
        description: Get a user consents
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: clientId
          in: query
          type: string
      - name: revokeuserconsents
        method: DELETE
        description: Revoke user consents
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: clientId
          in: query
          type: string
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/consents/{consent}
      operations:
      - name: getuserconsent
        method: GET
        description: Get a user consent
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: consent
          in: path
          type: string
          required: true
      - name: revokeuserconsent
        method: DELETE
        description: Revoke a user consent
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: consent
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/credentials
      operations:
      - name: listusercredentials
        method: GET
        description: Get a user credentials
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/credentials/{credential}
      operations:
      - name: getusercredential
        method: GET
        description: Get a user credential
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: credential
          in: path
          type: string
          required: true
      - name: revokeusercredential
        method: DELETE
        description: Revoke a user credential
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: credential
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/devices
      operations:
      - name: listuserdevices
        method: GET
        description: List users for a security domain
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/devices/{device}
      operations:
      - name: deleteuserdevice
        method: DELETE
        description: Delete a device
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: device
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/factors
      operations:
      - name: listuserenrolledfactors
        method: GET
        description: Get a user enrolled factors
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/factors/{factor}
      operations:
      - name: deleteuserfactor
        method: DELETE
        description: Revoke user factor
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: factor
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/identities
      operations:
      - name: listuseridentities
        method: GET
        description: Get a user linked identities
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/identities/{identity}
      operations:
      - name: unlinkuseridentity
        method: DELETE
        description: Unlink user identity
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: identity
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/lock
      operations:
      - name: lockuser
        method: POST
        description: Lock a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/resetPassword
      operations:
      - name: resetpassword
        method: POST
        description: Reset password
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/roles
      operations:
      - name: listuserroles
        method: GET
        description: Get a user roles
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: dynamic
          in: query
          type: boolean
      - name: assignrolestouser
        method: POST
        description: Assign roles to a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/roles/{role}
      operations:
      - name: revokeuserrole
        method: DELETE
        description: Revoke role to a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: role
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/sendRegistrationConfirmation
      operations:
      - name: sendregistrationconfirmation
        method: POST
        description: Send registration confirmation email
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/status
      operations:
      - name: updateuserstatus
        method: PUT
        description: Update a user status
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/unlock
      operations:
      - name: unlockuser
        method: POST
        description: Unlock a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
    - name: organizations-organizationId-environments-environmentId-domains-domain-users-use
      path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/username
      operations:
      - name: updateusername
        method: PATCH
        description: Update a user username
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: environmentId
          in: path
          type: string
          required: true
        - name: domain
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-users
      path: /organizations/{organizationId}/users
      operations:
      - name: listorganisationusers
        method: GET
        description: List users of the organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: q
          in: query
          type: string
        - name: filter
          in: query
          type: string
        - name: page
          in: query
          type: integer
        - name: size
          in: query
          type: integer
      - name: createorganisationuser
        method: POST
        description: Create a platform user or Service Account
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-users-bulk
      path: /organizations/{organizationId}/users/bulk
      operations:
      - name: bulkorganisationuseroperation
        method: POST
        description: Create/update/delete platform users or Service Accounts
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: organizations-organizationId-users-user
      path: /organizations/{organizationId}/users/{user}
      operations:
      - name: getorganizationuser
        method: GET
        description: Get a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: user
          in: path
          type: string
          required: true
      - name: updateorganizationuser
        method: PUT
        description: Update a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: organizationId
          in: path
          type: string
          required: true
        - name: u

# --- truncated at 32 KB (89 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/capabilities/am-user.yaml