Users
- Users
- User Permissions
- User Roles
- Get User Role Assignment Object Definition
- Query and List User Role Assignments
- Query and List User Role Assignments (Legacy)
- Get User Role Assignment
- Create User Role Assignment
- Get Computed User Role Assignment Object Definition
- Query and List Computed User Role Assignments
- Query and List Computed User Role Assignments (Legacy)
- Get Computed User Role Assignment
- User Restrictions
- User Date and Time Formatting Preferences
Any user that needs to sign into Sage Intacct must have a unique user record.
Users
Get User Object Definition
lookup
List all the fields and relationships for the user object:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERINFO |
Query and List Users
query
List the login ID and record number of each active user:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERINFO |
filter | Optional | object | Filter expression to limit the response to only objects that match the expression. Check the value of a single field using operators such as equalto/like, or multiple fields using and/or. Query fields on related objects using the dot operator (for example, VENDOR.CREDITLIMIT on APBILL). |
select | Required | sequence | The names of the fields that you want included in the response, and an optional aggregate function such as count or sum . Returning all fields is not supported. |
orderby | Optional | object | Provide an order element with a field name and choose an ascending or descending sort order, for example: <order> |
options | Optional | object | Query options:
|
pagesize | Optional | integer | Maximum number of matching objects to return in the response, between 1 and 2000 items (Default: 100 ) |
offset | Optional | integer | Point at which to start indexing into records (Default: 0 ) |
Query and List Users (Legacy)
readByQuery
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERINFO |
fields | Optional | string | Comma-separated list of fields on the object to list. For best performance and predictability, limit the number of fields. To return all fields, omit the element or provide * for the value. |
query | Required | string | SQL-like query based on fields on the object. The following operators are supported: < , > , >= , <= , = , like , not like , in , not in , IS NOT NULL , IS NULL , AND , OR . Illegal XML characters must be properly encoded, and single quotes must be escaped with backslashes ('Jane\'s Deli' ). Joins are not supported. |
pagesize | Optional | integer | Custom page size between 1 and 1000 items (Default: 100 ) |
query
Fields
Name | Required | Type | Description |
---|---|---|---|
USERTYPE | Optional | string | User type.
|
Get User
read
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERINFO |
keys | Required | string | Comma-separated list of user RECORDNO to get |
fields | Optional | string | Comma-separated list of fields on the object to get. To return all fields, omit the element or provide * for the value.For best performance and predictability, limit the number of fields. |
returnFormat | Optional | string | Data format for the response body:
|
Get User by ID
readByName
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERINFO |
keys | Required | string | Comma-separated list of user LOGINID to get |
fields | Optional | string | Comma-separated list of fields on the object to get. To return all fields, omit the element or provide * for the value.For best performance and predictability, limit the number of fields. |
returnFormat | Optional | string | Data format for the response body:
|
Create User
When a user is created, it must be associated with a contact. The new user can be associated with a new contact created at the same time, or associated with an existing contact.
Only users with Administrative privileges can create users.
create
Create a user with a new contact:
Create a user with an existing contact, and set location and department restrictions:
Parameters
Name | Required | Type | Description |
---|---|---|---|
USERINFO | Required | object | Object to create |
USERINFO
Name | Required | Type | Description |
---|---|---|---|
LOGINID | Required | string | User ID |
CONTACTINFO | Required | object | Contact info of user |
DESCRIPTION | Optional | string | User name. This is usually a concatenation of first and last name |
USERTYPE | Optional | string | User type.
|
STATUS | Optional | string | User status.
|
LOGINDISABLED | Optional | boolean | This user is a “web services only” user and cannot sign in to the Intacct web application.
|
SSO_ENABLED | Optional | boolean | Single sign on enabled.
|
SSO_FEDERATED_ID | Optional | string | SSO federated ID for this user. |
USERLOCATIONS | Optional | array of LOCATIONID |
The IDs of locations that this user can access. If not specified, access is not restricted. |
USERDEPARTMENTS | Optional | array of DEPARTMENTID |
The IDs of departments that this user can access. If not specified, access is not restricted. |
USERTERRITORIES | Optional | array of TERRITORYID |
The IDs of territories that this user can access. If not specified, access is not restricted. |
CONTACTINFO
Name | Required | Type | Description |
---|---|---|---|
LASTNAME | Optional | string | Last name. Required if you want to create the user with a new contact. |
FIRSTNAME | Optional | string | First name. Required if you want to create the user with a new contact. |
EMAIL1 | Optional | string | Email address. Required if you want to create the user with a new contact. |
CONTACTNAME | Optional | string | Contact name. Required if you want to create the user with an existing contact. |
Update User
When updating a user, you must include the original restrictions for entities, departments, or territories (if any) or they will be deleted. To add a restriction, supply the original restrictions along with the new one. To delete a restriction, supply only the ones you want to keep.
Only users with Administrative privileges can update users. Contact info cannot be changed from the API.
update
Update a user’s location and department restrictions:
Parameters
Name | Required | Type | Description |
---|---|---|---|
USERINFO | Required | object | Object to update |
USERINFO
Name | Required | Type | Description |
---|---|---|---|
RECORDNO | Optional | integer | Record number of user to update. Required if not using LOGINID . |
LOGINID | Optional | string | Login ID. Required if not using RECORDNO . |
DESCRIPTION | Optional | string | User name, usually concatenation of first and last name |
USERTYPE | Optional | string | User type.
|
STATUS | Optional | string | User status.
|
LOGINDISABLED | Optional | boolean | This user is a “web services only” user and cannot sign in to the Intacct web application.
|
SSO_ENABLED | Optional | boolean | Single sign on enabled.
|
SSO_FEDERATED_ID | Optional | string | SSO federated ID for this user. |
USERLOCATIONS | Optional | array of LOCATIONID |
The IDs of locations that this user can access. If not specified, access is not restricted. |
USERDEPARTMENTS | Optional | array of DEPARTMENTID |
The IDs of departments that this user can access. If not specified, access is not restricted. |
USERTERRITORIES | Optional | array of TERRITORYID |
The IDs of territories that this user can access. If not specified, access is not restricted. |
Delete User
Only users with Administrative privileges can delete users. Also, a user with Administrative privileges cannot be deleted—you can use the update
function to set the user status to inactive
instead.
delete
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERINFO |
keys | Required | string | Comma-separated list of user RECORDNO to delete |
User Permissions
Get User Effective Permissions
Effective permissions mean either the specific user-defined permissions or the effective list of permissions derived from role membership.
This function is only available to users who have the Company -> Lists -> Users -> Permissions -> View permission.
getUserPermissions
Parameters
Name | Required | Type | Description |
---|---|---|---|
userId | Required | string | User LOGINID to get permissions for |
Response
The rights
value is a pipe-delimited list you will need to parse appropriately.
Get User Permission Object Definition
lookup
List all the fields and relationships for the user permission object:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRIGHTS |
Query and List User Permissions
query
List the record number and user login ID for each user permission:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRIGHTS |
filter | Optional | object | Filter expression to limit the response to only objects that match the expression. Check the value of a single field using operators such as equalto/like, or multiple fields using and/or. Query fields on related objects using the dot operator (for example, VENDOR.CREDITLIMIT on APBILL). |
select | Required | sequence | The names of the fields that you want included in the response, and an optional aggregate function such as count or sum . Returning all fields is not supported. |
orderby | Optional | object | Provide an order element with a field name and choose an ascending or descending sort order, for example: <order> |
options | Optional | object | Query options:
|
pagesize | Optional | integer | Maximum number of matching objects to return in the response, between 1 and 2000 items (Default: 100 ) |
offset | Optional | integer | Point at which to start indexing into records (Default: 0 ) |
Query and List User Permissions (Legacy)
readByQuery
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRIGHTS |
fields | Optional | string | Comma-separated list of fields on the object to list. For best performance and predictability, limit the number of fields. To return all fields, omit the element or provide * for the value. |
query | Required | string | SQL-like query based on fields on the object. The following operators are supported: < , > , >= , <= , = , like , not like , in , not in , IS NOT NULL , IS NULL , AND , OR . Illegal XML characters must be properly encoded, and single quotes must be escaped with backslashes ('Jane\'s Deli' ). Joins are not supported. |
pagesize | Optional | integer | Custom page size between 1 and 1000 items (Default: 100 ) |
Get User Permission
read
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRIGHTS |
keys | Required | string | Comma-separated list of permission RECORDNO to get |
fields | Optional | string | Comma-separated list of fields on the object to get. To return all fields, omit the element or provide * for the value.For best performance and predictability, limit the number of fields. |
returnFormat | Optional | string | Data format for the response body:
|
User Roles
Get User Role Assignment Object Definition
lookup
List all the fields and relationships for the user role assignment object:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERROLES |
Query and List User Role Assignments
query
List the user ID and role name for each user role for
tsmith
:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERROLES |
filter | Optional | object | Filter expression to limit the response to only objects that match the expression. Check the value of a single field using operators such as equalto/like, or multiple fields using and/or. Query fields on related objects using the dot operator (for example, VENDOR.CREDITLIMIT on APBILL). |
select | Required | sequence | The names of the fields that you want included in the response, and an optional aggregate function such as count or sum . Returning all fields is not supported. |
orderby | Optional | object | Provide an order element with a field name and choose an ascending or descending sort order, for example: <order> |
options | Optional | object | Query options:
|
pagesize | Optional | integer | Maximum number of matching objects to return in the response, between 1 and 2000 items (Default: 100 ) |
offset | Optional | integer | Point at which to start indexing into records (Default: 0 ) |
Query and List User Role Assignments (Legacy)
readByQuery
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERROLES |
fields | Optional | string | Comma-separated list of fields on the object to list. For best performance and predictability, limit the number of fields. To return all fields, omit the element or provide * for the value. |
query | Required | string | SQL-like query based on fields on the object. The following operators are supported: < , > , >= , <= , = , like , not like , in , not in , IS NOT NULL , IS NULL , AND , OR . Illegal XML characters must be properly encoded, and single quotes must be escaped with backslashes ('Jane\'s Deli' ). Joins are not supported. |
pagesize | Optional | integer | Custom page size between 1 and 1000 items (Default: 100 ) |
Get User Role Assignment
read
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use ROLES |
keys | Required | string | Comma-separated list of assignment RECORDNO to get |
fields | Optional | string | Comma-separated list of fields on the object to get. To return all fields, omit the element or provide * for the value.For best performance and predictability, limit the number of fields. |
returnFormat | Optional | string | Data format for the response body:
|
Create User Role Assignment
Only users with Administrative privileges can create user role assignments.
create
Parameters
Name | Required | Type | Description |
---|---|---|---|
USERROLES | Required | object | Object to create |
USERROLES
Name | Required | Type | Description |
---|---|---|---|
USERID | Required | string | User ID |
ROLENAME | Required | string | Role name to assign to user |
Get Computed User Role Assignment Object Definition
lookup
List all the fields and relationships for the computed user role assignment object:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use ROLEUSERS |
Query and List Computed User Role Assignments
User role assignments can either come from direct assignment on the user, or inherited from a user group.
query
List the user login ID and role name for each computed role assignment:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use ROLEUSERS |
filter | Optional | object | Filter expression to limit the response to only objects that match the expression. Check the value of a single field using operators such as equalto/like, or multiple fields using and/or. Query fields on related objects using the dot operator (for example, VENDOR.CREDITLIMIT on APBILL). |
select | Required | sequence | The names of the fields that you want included in the response, and an optional aggregate function such as count or sum . Returning all fields is not supported. |
orderby | Optional | object | Provide an order element with a field name and choose an ascending or descending sort order, for example: <order> |
options | Optional | object | Query options:
|
pagesize | Optional | integer | Maximum number of matching objects to return in the response, between 1 and 2000 items (Default: 100 ) |
offset | Optional | integer | Point at which to start indexing into records (Default: 0 ) |
Query and List Computed User Role Assignments (Legacy)
User role assignments can either come from direct assignment on the user, or inherited from a user group.
readByQuery
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use ROLEUSERS |
fields | Optional | string | Comma-separated list of fields on the object to list. For best performance and predictability, limit the number of fields. To return all fields, omit the element or provide * for the value. |
query | Required | string | SQL-like query based on fields on the object. The following operators are supported: < , > , >= , <= , = , like , not like , in , not in , IS NOT NULL , IS NULL , AND , OR . Illegal XML characters must be properly encoded, and single quotes must be escaped with backslashes ('Jane\'s Deli' ). Joins are not supported. |
pagesize | Optional | integer | Custom page size between 1 and 1000 items (Default: 100 ) |
Get Computed User Role Assignment
User role assignments can either come from direct assignment on the user, or inherited from a user group.
read
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use ROLEUSERS |
keys | Required | string | Comma-separated list of assignment RECORDNO to get |
fields | Optional | string | Comma-separated list of fields on the object to get. To return all fields, omit the element or provide * for the value.For best performance and predictability, limit the number of fields. |
returnFormat | Optional | string | Data format for the response body:
|
User Restrictions
Get User Restriction Object Definition
lookup
List all the fields and relationships for the user restriction object:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRESTRICTION |
Query and List User Restrictions
query
List the login ID and user type for each user restriction:
List the login ID and location ID for each user restriction by location:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRESTRICTION |
filter | Optional | object | Filter expression to limit the response to only objects that match the expression. Check the value of a single field using operators such as equalto/like, or multiple fields using and/or. Query fields on related objects using the dot operator (for example, VENDOR.CREDITLIMIT on APBILL). |
select | Required | sequence | The names of the fields that you want included in the response, and an optional aggregate function such as count or sum . Returning all fields is not supported. |
orderby | Optional | object | Provide an order element with a field name and choose an ascending or descending sort order, for example: <order> |
options | Optional | object | Query options:
|
pagesize | Optional | integer | Maximum number of matching objects to return in the response, between 1 and 2000 items (Default: 100 ) |
offset | Optional | integer | Point at which to start indexing into records (Default: 0 ) |
Response
A user restriction object is returned for each user found. If a user’s access is not limited by location or department, UNRESTRICTED
is true
. If a user is limited to certain locations or departments, UNRESTRICTED
is false
and those locations or departments are not empty.
Query and List User Restrictions (Legacy)
Users can be restricted to given departments or locations.
Only users with Administrative privileges can list or get user restrictions.
readByQuery
List user restrictions for all users:
List user restrictions for users that are limited to the designated location:
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRESTRICTION |
fields | Optional | string | Comma-separated list of fields on the object to list. For best performance and predictability, limit the number of fields. To return all fields, omit the element or provide * for the value. |
query | Required | string | SQL-like query based on fields on the object. The following operators are supported: < , > , >= , <= , = , like , not like , in , not in , IS NOT NULL , IS NULL , AND , OR . Illegal XML characters must be properly encoded, and single quotes must be escaped with backslashes ('Jane\'s Deli' ). Joins are not supported. |
pagesize | Optional | integer | Custom page size between 1 and 1000 items (Default: 100 ) |
Response
A user restriction object is returned for each user found. If a user’s access is not limited by location or department, UNRESTRICTED
is true
. If a user is limited to certain locations or departments, UNRESTRICTED
is false
and the locations and departments that the user can access are listed.
Get User Restrictions
read
Parameters
Name | Required | Type | Description |
---|---|---|---|
object | Required | string | Use USERRESTRICTION |
keys | Required | string | Comma-separated list of user restriction RECORDNO to get |
fields | Optional | string | Comma-separated list of fields on the object to get. To return all fields, omit the element or provide * for the value.For best performance and predictability, limit the number of fields. |
returnFormat | Optional | string | Data format for the response body:
|
User Date and Time Formatting Preferences
List User Date and Time Formatting Preferences
Returns the user preferences for date and time format, locale, timezone (GMT offset), and time clock (12 or 24). The locale, such as en_US, is also returned.
readUserFormatting
Parameters
Name | Required | Type | Description |
---|---|---|---|
key | Optional | string | User RECORDNO for which to get formatting information. Required if not using userId . |
userId | Optional | string | User LOGINID for which to get formatting information. Required if not using key . |
Response
userformatting
The above function returns data structured like this:
Parameters
Name | Type | Description |
---|---|---|
recordno | integer | Record number of the user |
locale | string | Locale described as language_countrycode , such as en_US |
dateformat | string | Date format indicated by four characters. The first character is the separator, the last three characters are m for the month, d for the day, y for the year in a two-digit format, or Y for the year in a four-digit format. The order of the last three characters indicates the ordering in the format. For example, a format of .mdy indicates MM.DD.YY and a format of -Ymd indicates YYYY-MM-DD. |
gmtoffset | string | GMT offset in format +/- hh:mm |
clock | integer | Time clock used for hours, either 12 or 24. |