Skip to content
English

Get list of all users

GET
/system/users
curl --request GET \
--url 'https://example.com/api/v1/system/users?limit=50&offset=0&mlist=' \
--cookie grommunioAuthJwt=<grommunioAuthJwt>
level
integer

Set detail level of return value. Usually ranges from 0 to 2.

limit
integer
default: 50

Maximum number of results to return

offset
integer
0

Index of the first element to return

match
string

Match by substring

matchFields
string

Comma separated list of attributes to restrict matching to.

filterProp
string
/^\w+:\w+(,\w+)*(;\w+:\w+(,\w+)*)*$/

Filter by user property

matchProps
string

Comma separated list of user properties to match

properties
string

Comma separated list of properties to return

mlist
string
Allowed values: ""

Hide MList users

User list returned

Media typeapplication/json
object
data
Array<object>
object
ID

Unique ID of the object

integer
username
string
<= 320 characters
domainID
integer
roles

List of role associated with the user

Array<object>
object
ID

Unique ID of the object

integer
name
string
properties

User properties as name/value pairs

object
key
additional properties
any
altnames

List of alternative login names

Array<object>
object
altname

Alternative login name

string
magic

Source (0=manual, 99=LDAP)

integer
aliases

List of aliases for this user

Array<string>
status

User status (0=Normal, 1=Suspended, 3=Deleted, 4=Shared Mailbox, 5=Contact)

integer
Allowed values: 0 1 2 3 4 5
pop3_imap

POP3/IMAP privilege

boolean
smtp

SMTP privilege

boolean
changePassword

Password changing privilege

boolean
publicAddress

Public address privilege

boolean
privChat

Chat privilege

boolean
privVideo

Meet privilege

boolean
privFiles

Files privilege

boolean
privArchive

Archive privilege

boolean
privWeb

Web privilege

boolean
privEas

EAS privilege

boolean
privDav

DAV privilege

boolean
ldapID

Base64 encoded LDAP object ID

string
nullable
fetchmail

List of fetchmail entries for this user

Array<object>
object
ID
integer
mailbox

Username of the local user

string
active

Whether fetchmail is currently activated

boolean
srcServer

Source server address

string
srcUser

Source user

string
srcPassword

Password of the source user

string
date

Last modification time

string
/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$/
srcAuth

Type auf authentication to use

string
default: password
Allowed values: password kerberos_v5 kerberos kerberos_v4 gssapi cram-md5 otp ntlm msn ssh any
srcFolder

Folder to sync from

string
fetchall

Whether to fetch seen mails

boolean
keep

Keep original e-mails

boolean
protocol

Protocol to use

string
Allowed values: POP3 IMAP POP2 ETRN AUTO
useSSL

Whether to use SSL

boolean
sslCertCheck

Check ssl certificate

boolean
sslCertPath

Path to local certificate directory or null to use local default

string
nullable
sslFingerprint

Fingerprint of the server certificate

string
nullable /^([0-9A-F]{2}(:[0-9A-F]{2})*)?$/
extraOptions

Additional fetchmail options

string
nullable
syncPolicy

Active Sync Policy overrides

object
allowbluetooth

Whether Bluetooth and hands-free profiles are allowed on the device (0=disabled, 1=allow only HFP, 2=allow)

integer
default: 2
Allowed values: 0 1 2
allowbrowser

Whether the device allows the use of a web browser.

integer
default: 1
Allowed values: 0 1
allowcam

Whether the device allows the use of the built-in camera.

integer
default: 1
Allowed values: 0 1
allowconsumeremail

Whether the device allows the use of personal email.

integer
default: 1
Allowed values: 0 1
allowdesktopsync

Whether the device allows synchronization with Desktop ActiveSync.

integer
default: 1
Allowed values: 0 1
allowhtmlemail

Whether the device uses HTML-formatted email.

integer
default: 1
Allowed values: 0 1
allowinternetsharing

Whether the device allows the use of Internet Sharing.

integer
default: 1
Allowed values: 0 1
allowirda

Whether the device allows the use of IrDA (infrared) connections.

integer
default: 1
Allowed values: 0 1
allowpopimapemail

Whether the device allows access to POP/IMAP email.

integer
default: 1
Allowed values: 0 1
allowremotedesk

Whether the device allows the use of Remote Desktop.

integer
default: 1
Allowed values: 0 1
allowsimpledevpw

Whether the device allows simple passwords.

integer
default: 1
Allowed values: 0 1
allowsmimeencalgneg

Whether the device can negotiate the encryption algorithm to be used for signing (0=not allowed, 1=only strong, 2=any)

integer
default: 2
Allowed values: 0 1 2
allowsmimesoftcerts

Whether the device uses soft certificates to sign outgoing messages.

integer
default: 1
Allowed values: 0 1
allowstoragecard

Whether the device allows the use of the storage card.

integer
default: 1
Allowed values: 0 1
allowtextmessaging

Whether the device allows Short Message Service (SMS)/text messaging.

integer
default: 1
Allowed values: 0 1
allowunsignedapps

Whether the device allows unsigned applications to execute.

integer
default: 1
Allowed values: 0 1
allowunsigninstallpacks

Whether the device allows unsigned cabinet (.cab) files to be installed.

integer
default: 1
Allowed values: 0 1
allowwifi

Whether the device allows the use of Wi-Fi connections.

integer
default: 1
Allowed values: 0 1
alphanumpwreq

Indicates whether a client device requires an alphanumeric password.

integer
0
Allowed values: 0 1
approvedapplist

A list of in-RAM applications that are approved for execution.

Array<string>
default:
attenabled

Indicates whether email attachments are enabled.

integer
default: 1
Allowed values: 0 1
devencenabled

Deprecated, kept for backwards compatibility

integer
0
Allowed values: 0 1
devpwenabled

Indicates whether a client device requires a password.

integer
0
Allowed values: 0 1
devpwexpiration

Whether the password expires after the specified number of days, as determined by the policy (0=unlimited).

integer
0
devpwhistory

The minimum number of previously used passwords the client device stores to prevent reuse (0=no storage).

integer
0
maxattsize
One of:

Unlimited attachment size

string
""
Allowed values: ""
maxcalagefilter

The maximum number of calendar days that can be synchronized (0=unlimited, 4=2 weeks, 5=1 month, 6=3 months, 7=6 months)

integer
0
Allowed values: 0 4 5 6 7
maxdevpwfailedattempts

The number of password failures that are permitted before the device is wiped.

integer
default: 8 >= 4 <= 16
maxemailagefilter

The email age limit for synchronization (0=all, 1=1 day, 2=3 days, 3=1 week, 4=2 weeks, 5=1 month)

integer
0
Allowed values: 0 1 2 3 4 5
maxemailbodytruncsize

The truncation size for plain text-formatted email messages (-1=unlimited, 0=header only, >0=truncate to size)

integer
default: -1
maxemailhtmlbodytruncsize

The truncation size for HTML-formatted email messages (-1=unlimited, 0=header only, >0=truncate to size)

integer
default: -1
maxinacttimedevlock

The number of seconds of inactivity before the device locks itself (>9999=unlimited)

integer
default: 900
mindevcomplexchars

The minimum number of character classes (lower case, upper case, numbers and symbols) contained within the password.

integer
default: 3 >= 1 <= 4
mindevpwlenngth

The minimum device password length that the user can enter (1=unlimited).

integer
default: 4 >= 1 <= 16
pwrecoveryenabled

Indicates whether to enable a recovery password to be sent to the server by using the Settings command.

integer
0
Allowed values: 0 1
reqdevenc

Whether the device uses encryption.

integer
0
Allowed values: 0 1
reqencsmimealgorithm

The algorithm to be used when encrypting a message (0=TripleDES, 1=DES, 2=RC2128bit, 3=RC264bit, 4=RC240bit)

integer
0
Allowed values: 0 1 2 3 4
reqencsmimemessages

Whether the device is required to send encrypted messages.

integer
0
Allowed values: 0 1
reqmansyncroam

Whether the device requires manual synchronization when the device is roaming.

integer
0
Allowed values: 0 1
reqsignedsmimealgorithm

The algorithm to be used when signing a message (0=SHA1, 1=MD5)

integer
0
Allowed values: 0 1
reqsignedsmimemessages

Whether the device is required to send signed S/MIME messages.

integer
0
Allowed values: 0 1
reqstoragecardenc

Require encryption on storage card (0=no, 1=yes)

integer
0
unapprovedinromapplist

A list of in-ROM applications that are not approved for execution.

Array<string>
default:
chat

Whether chat is enabled for this user

boolean
chatAdmin

Whether this user has grommunio-chat admin permissions

boolean
lang

User language

string
forward
object
forwardType

Forward type (0=CC, 1=Redirect)

integer
Allowed values: 0 1
destination

Destination mail address

string
homeserver
object
ID

Unique ID of the object

integer
hostname

Internal hostname of the server

string
mlist

ID of the associated MList

integer
nullable
orgID

ID of the organization the user belongs to

integer
Example
{
"data": [
{
"status": 0,
"fetchmail": [
{
"srcAuth": "password",
"protocol": "POP3",
"sslCertCheck": false,
"sslCertPath": null,
"sslFingerprint": null
}
],
"syncPolicy": {
"allowbluetooth": 0,
"allowbrowser": 0,
"allowcam": 0,
"allowconsumeremail": 0,
"allowdesktopsync": 0,
"allowhtmlemail": 0,
"allowinternetsharing": 0,
"allowirda": 0,
"allowpopimapemail": 0,
"allowremotedesk": 0,
"allowsimpledevpw": 0,
"allowsmimeencalgneg": 0,
"allowsmimesoftcerts": 0,
"allowstoragecard": 0,
"allowtextmessaging": 0,
"allowunsignedapps": 0,
"allowunsigninstallpacks": 0,
"allowwifi": 0,
"alphanumpwreq": 0,
"approvedapplist": [],
"attenabled": 0,
"devencenabled": 0,
"devpwenabled": 0,
"devpwexpiration": 0,
"devpwhistory": 0,
"maxattsize": "",
"maxcalagefilter": 0,
"maxdevpwfailedattempts": 8,
"maxemailagefilter": 0,
"maxemailbodytruncsize": -1,
"maxemailhtmlbodytruncsize": -1,
"maxinacttimedevlock": 900,
"mindevcomplexchars": 3,
"mindevpwlenngth": 4,
"pwrecoveryenabled": 0,
"reqdevenc": 0,
"reqencsmimealgorithm": 0,
"reqencsmimemessages": 0,
"reqmansyncroam": 0,
"reqsignedsmimealgorithm": 0,
"reqsignedsmimemessages": 0,
"reqstoragecardenc": 0,
"unapprovedinromapplist": []
},
"forward": {
"forwardType": 0
}
}
]
}

Validation of input parameters failed

Media typeapplication/json
object
message
string
errors

List of errors encountered during validation

Array<string>
Examplegenerated
{
"message": "example",
"errors": [
"example"
]
}

An error occurred while processing the request

Media typeapplication/json
object
message

String representation of the exception

string
Examplegenerated
{
"message": "example"
}

The database query failed

Media typeapplication/json
object
message

Description of the error

string
Examplegenerated
{
"message": "example"
}