Unleash Admin API — Users

naftiko: 1.0.0-alpha2
info:
  label: Unleash Admin API — Users
  description: 'Unleash Admin API — Users. 30 operations. Lead operation: Get a List of Groups. Self-contained Naftiko capability
    covering one Unleash business surface.'
  tags:
  - Unleash
  - Users
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    UNLEASH_API_KEY: UNLEASH_API_KEY
capability:
  consumes:
  - type: http
    namespace: admin-users
    baseUri: https://app.unleash-instance.example.com
    description: Unleash Admin API — Users business capability. Self-contained, no shared references.
    resources:
    - name: api-admin-groups
      path: /api/admin/groups
      operations:
      - name: getgroups
        method: GET
        description: Get a List of Groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: creategroup
        method: POST
        description: Create a New Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-groups-scim-groups
      path: /api/admin/groups/scim-groups
      operations:
      - name: deletescimgroups
        method: DELETE
        description: Delete All SCIM Groups
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-groups-groupId
      path: /api/admin/groups/{groupId}
      operations:
      - name: getgroup
        method: GET
        description: Get a Single Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: groupId
          in: path
          type: string
          required: true
      - name: updategroup
        method: PUT
        description: Update a Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: groupId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deletegroup
        method: DELETE
        description: Delete a Single Group
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: groupId
          in: path
          type: string
          required: true
    - name: api-admin-roles
      path: /api/admin/roles
      operations:
      - name: getroles
        method: GET
        description: Get a List of Roles
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createrole
        method: POST
        description: Create a New Role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-roles-validate
      path: /api/admin/roles/validate
      operations:
      - name: validaterole
        method: POST
        description: Validate a Role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-roles-roleId
      path: /api/admin/roles/{roleId}
      operations:
      - name: getrolebyid
        method: GET
        description: Get a Single Role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: roleId
          in: path
          type: string
          required: true
      - name: updaterole
        method: PUT
        description: Update a Role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: roleId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleterole
        method: DELETE
        description: Delete a Custom Role
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: roleId
          in: path
          type: string
          required: true
    - name: api-admin-user
      path: /api/admin/user
      operations:
      - name: getme
        method: GET
        description: Get Your Own User Details
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-user-admin
      path: /api/admin/user-admin
      operations:
      - name: getusers
        method: GET
        description: Get All Users and [root Roles](https://docs.getunleash.io/concepts/rbac#predefined-roles)
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createuser
        method: POST
        description: Create a New User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-user-admin-access
      path: /api/admin/user-admin/access
      operations:
      - name: getbaseusersandgroups
        method: GET
        description: Get Basic User and Group Information
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-user-admin-admin-count
      path: /api/admin/user-admin/admin-count
      operations:
      - name: getadmincount
        method: GET
        description: Get Total Count of Admin Accounts
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-user-admin-inactive
      path: /api/admin/user-admin/inactive
      operations:
      - name: getinactiveusers
        method: GET
        description: Gets Inactive Users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-user-admin-inactive-delete
      path: /api/admin/user-admin/inactive/delete
      operations:
      - name: deleteinactiveusers
        method: POST
        description: Deletes Inactive Users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-user-admin-reset-password
      path: /api/admin/user-admin/reset-password
      operations:
      - name: resetuserpassword
        method: POST
        description: Reset User Password
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-user-admin-scim-users
      path: /api/admin/user-admin/scim-users
      operations:
      - name: deletescimusers
        method: DELETE
        description: Delete All SCIM Users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-user-admin-search
      path: /api/admin/user-admin/search
      operations:
      - name: searchusers
        method: GET
        description: Search Users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: q
          in: query
          type: string
          description: The pattern to search in the username or email
    - name: api-admin-user-admin-validate-password
      path: /api/admin/user-admin/validate-password
      operations:
      - name: validateuserpassword
        method: POST
        description: Validate Password for a User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-user-admin-id
      path: /api/admin/user-admin/{id}
      operations:
      - name: getuser
        method: GET
        description: Get User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: a user id
          required: true
      - name: updateuser
        method: PUT
        description: Update a User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: a user id
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteuser
        method: DELETE
        description: Delete a User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: a user id
          required: true
    - name: api-admin-user-admin-id-change-password
      path: /api/admin/user-admin/{id}/change-password
      operations:
      - name: changeuserpassword
        method: POST
        description: Change Password for a User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: id
          in: path
          type: integer
          description: a user id
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-user-change-password
      path: /api/admin/user/change-password
      operations:
      - name: changemypassword
        method: POST
        description: Change Your Own Password
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-admin-user-profile
      path: /api/admin/user/profile
      operations:
      - name: getprofile
        method: GET
        description: Get Your Own User Profile
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: api-admin-user-roles
      path: /api/admin/user/roles
      operations:
      - name: getuserroles
        method: GET
        description: Get Roles for Currently Logged in User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: projectId
          in: query
          type: string
          description: The id of the project you want to check permissions for
    authentication:
      type: bearer
      token: '{{env.UNLEASH_API_KEY}}'
  exposes:
  - type: rest
    namespace: admin-users-rest
    port: 8080
    description: REST adapter for Unleash Admin API — Users. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/api/admin/groups
      name: api-admin-groups
      description: REST surface for api-admin-groups.
      operations:
      - method: GET
        name: getgroups
        description: Get a List of Groups
        call: admin-users.getgroups
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: creategroup
        description: Create a New Group
        call: admin-users.creategroup
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/groups/scim-groups
      name: api-admin-groups-scim-groups
      description: REST surface for api-admin-groups-scim-groups.
      operations:
      - method: DELETE
        name: deletescimgroups
        description: Delete All SCIM Groups
        call: admin-users.deletescimgroups
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/groups/{groupid}
      name: api-admin-groups-groupid
      description: REST surface for api-admin-groups-groupId.
      operations:
      - method: GET
        name: getgroup
        description: Get a Single Group
        call: admin-users.getgroup
        with:
          groupId: rest.groupId
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updategroup
        description: Update a Group
        call: admin-users.updategroup
        with:
          groupId: rest.groupId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deletegroup
        description: Delete a Single Group
        call: admin-users.deletegroup
        with:
          groupId: rest.groupId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/roles
      name: api-admin-roles
      description: REST surface for api-admin-roles.
      operations:
      - method: GET
        name: getroles
        description: Get a List of Roles
        call: admin-users.getroles
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createrole
        description: Create a New Role
        call: admin-users.createrole
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/roles/validate
      name: api-admin-roles-validate
      description: REST surface for api-admin-roles-validate.
      operations:
      - method: POST
        name: validaterole
        description: Validate a Role
        call: admin-users.validaterole
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/roles/{roleid}
      name: api-admin-roles-roleid
      description: REST surface for api-admin-roles-roleId.
      operations:
      - method: GET
        name: getrolebyid
        description: Get a Single Role
        call: admin-users.getrolebyid
        with:
          roleId: rest.roleId
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updaterole
        description: Update a Role
        call: admin-users.updaterole
        with:
          roleId: rest.roleId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleterole
        description: Delete a Custom Role
        call: admin-users.deleterole
        with:
          roleId: rest.roleId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user
      name: api-admin-user
      description: REST surface for api-admin-user.
      operations:
      - method: GET
        name: getme
        description: Get Your Own User Details
        call: admin-users.getme
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin
      name: api-admin-user-admin
      description: REST surface for api-admin-user-admin.
      operations:
      - method: GET
        name: getusers
        description: Get All Users and [root Roles](https://docs.getunleash.io/concepts/rbac#predefined-roles)
        call: admin-users.getusers
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createuser
        description: Create a New User
        call: admin-users.createuser
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/access
      name: api-admin-user-admin-access
      description: REST surface for api-admin-user-admin-access.
      operations:
      - method: GET
        name: getbaseusersandgroups
        description: Get Basic User and Group Information
        call: admin-users.getbaseusersandgroups
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/admin-count
      name: api-admin-user-admin-admin-count
      description: REST surface for api-admin-user-admin-admin-count.
      operations:
      - method: GET
        name: getadmincount
        description: Get Total Count of Admin Accounts
        call: admin-users.getadmincount
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/inactive
      name: api-admin-user-admin-inactive
      description: REST surface for api-admin-user-admin-inactive.
      operations:
      - method: GET
        name: getinactiveusers
        description: Gets Inactive Users
        call: admin-users.getinactiveusers
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/inactive/delete
      name: api-admin-user-admin-inactive-delete
      description: REST surface for api-admin-user-admin-inactive-delete.
      operations:
      - method: POST
        name: deleteinactiveusers
        description: Deletes Inactive Users
        call: admin-users.deleteinactiveusers
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/reset-password
      name: api-admin-user-admin-reset-password
      description: REST surface for api-admin-user-admin-reset-password.
      operations:
      - method: POST
        name: resetuserpassword
        description: Reset User Password
        call: admin-users.resetuserpassword
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/scim-users
      name: api-admin-user-admin-scim-users
      description: REST surface for api-admin-user-admin-scim-users.
      operations:
      - method: DELETE
        name: deletescimusers
        description: Delete All SCIM Users
        call: admin-users.deletescimusers
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/search
      name: api-admin-user-admin-search
      description: REST surface for api-admin-user-admin-search.
      operations:
      - method: GET
        name: searchusers
        description: Search Users
        call: admin-users.searchusers
        with:
          q: rest.q
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/validate-password
      name: api-admin-user-admin-validate-password
      description: REST surface for api-admin-user-admin-validate-password.
      operations:
      - method: POST
        name: validateuserpassword
        description: Validate Password for a User
        call: admin-users.validateuserpassword
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/{id}
      name: api-admin-user-admin-id
      description: REST surface for api-admin-user-admin-id.
      operations:
      - method: GET
        name: getuser
        description: Get User
        call: admin-users.getuser
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateuser
        description: Update a User
        call: admin-users.updateuser
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleteuser
        description: Delete a User
        call: admin-users.deleteuser
        with:
          id: rest.id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user-admin/{id}/change-password
      name: api-admin-user-admin-id-change-password
      description: REST surface for api-admin-user-admin-id-change-password.
      operations:
      - method: POST
        name: changeuserpassword
        description: Change Password for a User
        call: admin-users.changeuserpassword
        with:
          id: rest.id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user/change-password
      name: api-admin-user-change-password
      description: REST surface for api-admin-user-change-password.
      operations:
      - method: POST
        name: changemypassword
        description: Change Your Own Password
        call: admin-users.changemypassword
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user/profile
      name: api-admin-user-profile
      description: REST surface for api-admin-user-profile.
      operations:
      - method: GET
        name: getprofile
        description: Get Your Own User Profile
        call: admin-users.getprofile
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/admin/user/roles
      name: api-admin-user-roles
      description: REST surface for api-admin-user-roles.
      operations:
      - method: GET
        name: getuserroles
        description: Get Roles for Currently Logged in User
        call: admin-users.getuserroles
        with:
          projectId: rest.projectId
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: admin-users-mcp
    port: 9090
    transport: http
    description: MCP adapter for Unleash Admin API — Users. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: get-list-groups
      description: Get a List of Groups
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getgroups
      outputParameters:
      - type: object
        mapping: $.
    - name: create-new-group
      description: Create a New Group
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.creategroup
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-all-scim-groups
      description: Delete All SCIM Groups
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: admin-users.deletescimgroups
      outputParameters:
      - type: object
        mapping: $.
    - name: get-single-group
      description: Get a Single Group
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getgroup
      with:
        groupId: tools.groupId
      outputParameters:
      - type: object
        mapping: $.
    - name: update-group
      description: Update a Group
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: admin-users.updategroup
      with:
        groupId: tools.groupId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-single-group
      description: Delete a Single Group
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: admin-users.deletegroup
      with:
        groupId: tools.groupId
      outputParameters:
      - type: object
        mapping: $.
    - name: get-list-roles
      description: Get a List of Roles
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getroles
      outputParameters:
      - type: object
        mapping: $.
    - name: create-new-role
      description: Create a New Role
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.createrole
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: validate-role
      description: Validate a Role
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: admin-users.validaterole
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-single-role
      description: Get a Single Role
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getrolebyid
      with:
        roleId: tools.roleId
      outputParameters:
      - type: object
        mapping: $.
    - name: update-role
      description: Update a Role
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: admin-users.updaterole
      with:
        roleId: tools.roleId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-custom-role
      description: Delete a Custom Role
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: admin-users.deleterole
      with:
        roleId: tools.roleId
      outputParameters:
      - type: object
        mapping: $.
    - name: get-your-own-user-details
      description: Get Your Own User Details
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getme
      outputParameters:
      - type: object
        mapping: $.
    - name: get-all-users-and-root
      description: Get All Users and [root Roles](https://docs.getunleash.io/concepts/rbac#predefined-roles)
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getusers
      outputParameters:
      - type: object
        mapping: $.
    - name: create-new-user
      description: Create a New User
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.createuser
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-basic-user-and-group
      description: Get Basic User and Group Information
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getbaseusersandgroups
      outputParameters:
      - type: object
        mapping: $.
    - name: get-total-count-admin-accounts
      description: Get Total Count of Admin Accounts
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getadmincount
      outputParameters:
      - type: object
        mapping: $.
    - name: gets-inactive-users
      description: Gets Inactive Users
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getinactiveusers
      outputParameters:
      - type: object
        mapping: $.
    - name: deletes-inactive-users
      description: Deletes Inactive Users
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.deleteinactiveusers
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: reset-user-password
      description: Reset User Password
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.resetuserpassword
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-all-scim-users
      description: Delete All SCIM Users
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: admin-users.deletescimusers
      outputParameters:
      - type: object
        mapping: $.
    - name: search-users
      description: Search Users
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.searchusers
      with:
        q: tools.q
      outputParameters:
      - type: object
        mapping: $.
    - name: validate-password-user
      description: Validate Password for a User
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: admin-users.validateuserpassword
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-user
      description: Get User
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getuser
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: update-user
      description: Update a User
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: admin-users.updateuser
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-user
      description: Delete a User
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: admin-users.deleteuser
      with:
        id: tools.id
      outputParameters:
      - type: object
        mapping: $.
    - name: change-password-user
      description: Change Password for a User
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.changeuserpassword
      with:
        id: tools.id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: change-your-own-password
      description: Change Your Own Password
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: admin-users.changemypassword
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-your-own-user-profile
      description: Get Your Own User Profile
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getprofile
      outputParameters:
      - type: object
        mapping: $.
    - name: get-roles-currently-logged-user
      description: Get Roles for Currently Logged in User
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: admin-users.getuserroles
      with:
        projectId: tools.projectId
      outputParameters:
      - type: object
        mapping: $.