PSP > Product Manager > User Manager

List all customer users.

get

Returns a list of all customer users this request user has in this environment.

---

Claim-based access control: Issuer_Admin, Verifier_Admin, Identity_Issuer_Api

Authorizations

COGNITO_JWTISSUER_API_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Query parameters

identityServiceNamestring · enumRequiredPossible values:

includeProfileImagebooleanOptional

Option to include the customer user's profile image from the user profile, if it exists.

Default: false

Responses

200Success

application/json

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

503

PSP product manager api is unavailable.

get

/api/v1/psp/product-manager/user-manager/customer-users

HTTPcURLJavaScriptPython

GET /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users?identityServiceName=issuer HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

[
  {
    "id": "text",
    "name": "text",
    "email": "text",
    "status": "active",
    "roles": [
      {
        "name": "Issuer_Admin",
        "claims": [
          {
            "name": "text"
          }
        ]
      }
    ],
    "lastModifiedTimestamp": "2026-02-06T01:54:46.277Z",
    "profileImage": {
      "id": "text",
      "mimeType": "image/gif",
      "keyUrl": "text",
      "filename": "text"
    }
  }
]

Create new customer users.

post

Claim-based access control: Super_Dev, CreateUser, Issuer_Admin, Verifier_Admin

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Body

application/json

Responses

201Success

application/json

400

Invalid request body.

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

503

PSP product manager api is unavailable.

post

/api/v1/psp/product-manager/user-manager/customer-users/bulk

HTTPcURLJavaScriptPython

POST /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/bulk HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 102

{
  "users": [
    {
      "name": "text",
      "email": "text",
      "issuerRole": "Issuer_Admin",
      "verifierRole": "Verifier_Admin"
    }
  ]
}

[
  {
    "user": {
      "id": "text",
      "name": "text",
      "email": "text",
      "status": "active",
      "roles": [
        {
          "name": "Issuer_Admin",
          "claims": [
            {
              "name": "text"
            }
          ]
        }
      ]
    },
    "email": "[email protected]",
    "status": "success",
    "error": "text"
  }
]

Update customer user.

patch

Enables an authenticated customer user to change their data.

---

Claim-based access control: Issuer_Admin, Verifier_Admin, Issuer_Auditor, Verifier_Auditor, Verifier_User, Issuer_User

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Body

application/json

namestring · min: 1 · max: 200OptionalPattern: ^[\p{L}0-9\-_' ]+$

Responses

200Success

application/json

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

patch

/api/v1/psp/product-manager/user-manager/customer-users/me

HTTPcURLJavaScriptPython

PATCH /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/me HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 15

{
  "name": "text"
}

{
  "id": "text",
  "name": "text",
  "email": "text",
  "status": "active",
  "roles": [
    {
      "name": "Issuer_Admin",
      "claims": [
        {
          "name": "text"
        }
      ]
    }
  ]
}

Change customer user password.

patch

Enables an authenticated customer user to change their password.

---

Claim-based access control: Issuer_Admin, Issuer_Auditor, Issuer_User, Verifier_Admin, Verifier_Auditor, Verifier_User

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Body

application/json

newPasswordstring · password · min: 10 · max: 99Required

Password, at least 10 characters, requires uppercase, number and special character

Pattern: ^(?=.{10,99}$)(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$

Responses

200Success

application/json

400

Invalid request body or path parameter.

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

503

PSP product manager api is unavailable.

patch

/api/v1/psp/product-manager/user-manager/customer-users/me/password/change

HTTPcURLJavaScriptPython

PATCH /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/me/password/change HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 26

{
  "newPassword": "password"
}

{
  "id": "text",
  "name": "text",
  "email": "text",
  "status": "active",
  "roles": [
    {
      "name": "Issuer_Admin",
      "claims": [
        {
          "name": "text"
        }
      ]
    }
  ]
}

Disable an authenticated customer user.

post

Disables and removes roles from an authenticated customer user in the environment.

---

Claim-based access control: Issuer_Admin, Issuer_Auditor, Issuer_User, Verifier_Admin, Verifier_Auditor, Verifier_User

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

204

Customer user disabled successfully.

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

post

/api/v1/psp/product-manager/user-manager/customer-users/me/disable

HTTPcURLJavaScriptPython

POST /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/me/disable HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Retrieve customer user.

get

Retrieves an existing customer user from the environment.

---

Claim-based access control: Issuer_Admin, Issuer_Auditor, Issuer_User, Verifier_Admin, Verifier_Auditor, Verifier_User

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

customerUserIdstringRequired

Responses

200Success

application/json

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

get

/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}

HTTPcURLJavaScriptPython

GET /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId} HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "id": "text",
  "name": "text",
  "email": "text",
  "status": "active",
  "roles": [
    {
      "name": "Issuer_Admin",
      "claims": [
        {
          "name": "text"
        }
      ]
    }
  ]
}

Update customer user.

patch

Updates an existing customer user from the environment.

---

Claim-based access control: Issuer_Admin, Verifier_Admin, Issuer_AddRole, Verifier_AddRole

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

customerUserIdstringRequired

Body

application/json

issuerRoleall ofOptional

string · enumOptionalPossible values:

verifierRoleall ofOptional

string · enumOptionalPossible values:

Responses

200Success

application/json

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

patch

/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}

HTTPcURLJavaScriptPython

PATCH /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId} HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 61

{
  "issuerRole": "Issuer_Admin",
  "verifierRole": "Verifier_Admin"
}

{
  "id": "text",
  "name": "text",
  "email": "text",
  "status": "active",
  "roles": [
    {
      "name": "Issuer_Admin",
      "claims": [
        {
          "name": "text"
        }
      ]
    }
  ]
}

Disable customer user.

post

Disables and removes roles from an existing customer user from the environment.

---

Claim-based access control: Issuer_Admin, Verifier_Admin

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

customerUserIdstringRequired

Responses

204

Customer user disabled successfully.

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

post

/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}/disable

HTTPcURLJavaScriptPython

POST /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}/disable HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Resend email invitation.

post

Send a new email invitation for a customer user that has not yet accepted it.

---

Claim-based access control: CreateUser, Issuer_Admin, Verifier_Admin

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

customerUserIdstringRequired

Responses

201Success

application/json

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

post

/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}/resend-invitation

HTTPcURLJavaScriptPython

POST /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}/resend-invitation HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "id": "text",
  "name": "text",
  "email": "text",
  "status": "active",
  "roles": [
    {
      "name": "Issuer_Admin",
      "claims": [
        {
          "name": "text"
        }
      ]
    }
  ]
}

List all Customer User Event.

get

Returns a list of all events for the provided customer user in this environment

---

Claim-based access control: Issuer_Admin, Verifier_Admin

Authorizations

COGNITO_JWT

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

customerUserIdstringRequired

Responses

200Success

application/json

401

Invalid authentication credentials.

403

User does not have a required claim to perform this operation.

404

Customer user not found.

503

PSP product manager api is unavailable.

get

/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}/events

HTTPcURLJavaScriptPython

GET /products/web/12345/portal/backend/api/v1/psp/product-manager/user-manager/customer-users/{customerUserId}/events HTTP/1.1
Host: identity.products.teranode.group
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

[
  {
    "id": "text",
    "role": "Issuer_Admin",
    "timestamp": "2026-02-06T01:54:46.277Z",
    "type": "user_added",
    "editor": {
      "id": "text",
      "name": "text",
      "email": "text",
      "status": "active"
    }
  }
]