Users & Roles

Manage the people on your team who have access to the merchant dashboard. Users are scoped to one or more merchants/organisations and each one carries a role that decides what they can do (view, manage payments, manage connectors, manage other users, etc.).

Lifecycle

1. Invite. POST /user/user/invite_multiple sends an email with a one-time link. The user is created in invitation_sent state.
2. Accept. The recipient clicks the link, sets a password, optionally TOTP, and lands on the dashboard. State moves to active.
3. Update role. POST /user/user/update_role changes the user's role in place.
4. Resend invite. POST /user/user/resend_invite generates a fresh link if the original expired.
5. Remove. DELETE /user/user/delete revokes access.

Endpoints