Users
The users in the environment.
View-Specific Information
SELECT
Reading data from this entity requires Read User/dir:read:user permission.We recommend using the built-in Identity Data Admin role.
The 本製品 uses the PingOne Platform API to process WHERE clause conditions built with the following columns and operators.
- Id supports the following operators: =, IN.
All other filters are processed client-side within the 本製品.
For example, the following queries are processed server-side:
SELECT * FROM Administrators.Users WHERE Id = 'f45bb04b-d7ee-4f84-ab83-7fe3919405ae';
SELECT * FROM Administrators.Users WHERE Id IN ('f45bb04b-d7ee-4f84-ab83-7fe3919405ae', '4cbf5435-6c39-49f9-8c8f-cee7c1cd8a6b');
Columns
| Name | Type | References | Description |
| Id [KEY] | String | The user identifier (UUID). | |
| Username | String | The user name, which must be unique within an environment. | |
| FullName | String | The user's full name. | |
| Nickname | String | The user's nickname | |
| String | The user's email address, which must be provided and valid. | ||
| IsEnabled | Boolean | Boolean value indicating whether the user is enabled. | |
| PopulationId | String | Populations.Id | The identifier (UUID) of the population in with the user belongs. |
| IdentityProviderId | String | IdentityProviders.Id | The identifier (UUID) of the identity provider used to authenticate the user. If 'null' or empty, PingOne is the identity provider. |
| MobilePhone | String | The user's native phone number. | |
| PrimaryPhone | String | The user's primary phone number. | |
| ExternalId | String | An identifier for the user as defined by the provisioning client. | |
| AccountId | String | Identifier (UUID) of the user's account. Is organization-specific and has no special meaning within PingOne. | |
| PhotoURL | String | The URL that points to a resource location representing the user's image. | |
| EnvironmentId | String | Information.Environments.Id | The identifier (UUID) of the environment in which the user exists. |
| CreatedAt | Datetime | The time at which the user was created. | |
| UpdatedAt | Datetime | The time at which the user was last updated. | |
| IsMFAEnabled | Boolean | Boolean value indicating whether multi-factor authentication is enabled for the user. | |
| EmployeeType | String | The employee type for the user (e.g. Contractor, Employee, etc.). This is organization-specific and has no special meaning within PingOne. | |
| EmployeePosition | String | The employee title for the user (e.g. Vice President, CEO, etc.). This is organization-specific and has no special meaning within PingOne. | |
| Locale | String | A valid language tag (e.g. fr, en-US, es-419, etc.) indicating the user's default location. This is used for purposes of localizing such items as currency, date time format, or numerical representations. | |
| PreferredLanguage | String | A valid language range (e.g. en-US, en-gb, etc.) indicating the user's preferred written or spoken languages. | |
| Timezone | String | The user's time zone (e.g. America/Los_Angeles). | |
| LifecycleStatus | String | The status of the account lifecycle. Possible values are: 'ACCOUNT_OK' and 'VERIFICATION_REQUIRED'. | |
| VerificationStatus | String | Indicates whether ID verification can be done for the user. Possible values are: 'NOT_INITIATED' (the initial value), 'ENABLED', or 'DISABLED'. | |
| Status | String | The account's locked state. Possible values are: 'LOCKED' and 'OK'. | |
| CanAuthenticate | Boolean | Boolean value indicating whether the user can authenticate. If the value is set to 'false', the account is locked or the user is disabled. Otherwise if the value is set to 'true', the user will be unable to authenticate. | |
| LockedAt | Datetime | The time the specified user account was locked. This is empty or 'null' if the account is unlocked or if the account was locked out automatically by failed password attempts. | |
| UnlocksAt | Datetime | The time the specified user account will be unlocked. This is empty or 'null' if the account is unlocked, or if it will not automatically unlock and must be unlocked by an administrator. | |
| LastSignOnTime | Datetime | The last time the user signed on using one or more authenticators. | |
| LastSignOnIPAddress | String | The IP address of the remote device used during the last sign-on. | |
| City | String | The city in the user's address. | |
| Region | String | The region in the user's address. | |
| StreetAddress | String | The street address in the user's address. | |
| CountryCode | String | The country code in the user's address. | |
| PostalCode | String | The postal code in the user's address. |