Updated on 2026-07-22 GMT+08:00

Querying IAM User Details

Function

This API is used to query IAM user details.

Authorization Information

Each account root user has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.

Action

Access Level

Resource Type (*: required)

Condition Key

Alias

Dependencies

iam:users:getUserV5

Read

user *

  • g:ResourceTag/<tag-key>

  • iam:ResourceIsRootUser

-

-

URI

GET /v5/users/{user_id}

Table 1 Path Parameters

Parameter

Mandatory

Type

Description

user_id

Yes

String

Definition:

IAM user ID.

Constraints:

The user ID must exist and be valid.

Range:

32 bits.

Default Value:

N/A

Request Parameters

None

Response Parameters

Status code: 200

Table 2 Response body parameters

Parameter

Type

Description

user

user object

Definition:

IAM user.

Range:

N/A

Table 3 user

Parameter

Type

Description

description

String

Definition:

Description of the IAM user.

Range:

N/A

user_name

String

Definition:

IAM username.

Range:

N/A

is_root_user

Boolean

Definition:

Whether an IAM user is the root user.

Range:

The value can be true or false.

created_at

String

Definition:

Time when an IAM user was created.

Range:

N/A

user_id

String

Definition:

IAM user ID, which is globally unique.

Range:

N/A

urn

String

Definition :

Uniform Resource Name (URN). For details, see Reference.

Range:

N/A.

enabled

Boolean

Definition:

Whether the IAM user is enabled.

Range:

The value can be true or false.

tags

Array of tags objects

Definition:

List of custom tags.

Range:

N/A

Table 4 tags

Parameter

Type

Description

tag_key

String

Definition:

Tag key.

Range:

N/A

tag_value

String

Definition:

Tag value.

Range:

N/A

Status code: 403

Table 5 Response body parameters

Parameter

Type

Description

error_code

String

Definition :

Error code. For details, see Error Code.

Range:

The format is PAP5.XXXX, for example, PAP5.0012.

error_msg

String

Definition :

Error message. For details, see Error Message.

Range:

N/A.

request_id

String

Definition:

Unique identifier of an API request, which is used to locate API calling exceptions.

Range:

N/A

encoded_authorization_message

String

Definition :

Encrypted details returned when the authentication fails, which are used to locate authentication problems. The STS5 decryption API can be used for decryption. For details, see API link.

Range:

N/A.

Status code: 404

Table 6 Response body parameters

Parameter

Type

Description

error_code

String

Definition :

Error code. For details, see Error Code.

Range:

The format is PAP5.XXXX, for example, PAP5.0012.

error_msg

String

Definition :

Error message. For details, see Error Message.

Range:

N/A.

request_id

String

Definition:

Unique identifier of an API request, which is used to locate API calling exceptions.

Range:

N/A

Example Requests

Querying IAM user details

GET https://{endpoint}/v5/users/{user_id}

Example Responses

Status code: 200

Successful

{
  "user" : {
    "description" : "description",
    "user_name" : "name",
    "is_root_user" : false,
    "created_at" : "2023-04-26T03:49:42Z",
    "user_id" : "string",
    "urn" : "iam::accountid:user:name",
    "enabled" : true,
    "tags" : [ {
      "tag_key" : "key",
      "tag_value" : "value"
    } ]
  }
}

Status Codes

Status Code

Description

200

Successful

403

Forbidden

404

Not found

Error Codes

See Error Codes.