> ## Documentation Index
> Fetch the complete documentation index at: https://docs.punchrescue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List organization users

> **Required permission:** `read`.

Lists the users belonging to this org. `role` mirrors the Admin Portal's
"Role" column (`responder | user | visitor`, from the user's response level);
`accessLevel` is the separate admin tier. `ownedDevice*` are per-org.



## OpenAPI

````yaml https://api.rescue-serverless.dev.back2back.team/api/public/v1/openapi.json get /orgs/{org_id}/users
openapi: 3.1.0
info:
  title: Rescue Public API v1
  description: >-
    Stable public API for partner integrations.


    **Authentication:** `Authorization: Bearer rk_live_<8 hex><64 hex>`. Tokens
    are minted via `POST /api/v1/api-keys` (internal admin) and shown exactly
    once at creation. The same plaintext is required for every public-v1 request
    — store it securely.


    **Permissions:** v1 vocabulary is `read` | `write`. Future versions may
    introduce granular `<resource>:<action>` permissions additively.


    **Idempotency:** retries on a 5xx must be assumed to have unknown outcomes —
    check `GET /emergencies/{id}` (optionally via `externalId`) before retrying.
    An `Idempotency-Key` header will be supported in a future revision.


    **Webhook delivery:** payloads may be duplicated and out-of-order. Dedup on
    `eventId`; order events per emergency on `(emergencyId, sequence)`.
  version: 1.0.0
servers:
  - url: https://api.punchrescue.com/api/public/v1
security:
  - BearerAuth: []
paths:
  /orgs/{org_id}/users:
    get:
      tags:
        - Users
      summary: List organization users
      description: >-
        **Required permission:** `read`.


        Lists the users belonging to this org. `role` mirrors the Admin Portal's

        "Role" column (`responder | user | visitor`, from the user's response
        level);

        `accessLevel` is the separate admin tier. `ownedDevice*` are per-org.
      operationId: users.list
      parameters:
        - name: org_id
          in: path
          required: true
          schema:
            type: string
            description: Target organization id (from the route path)
            title: Org Id
          description: Target organization id (from the route path)
        - name: cursor
          in: query
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: Cursor
        - name: limit
          in: query
          required: false
          schema:
            type: integer
            maximum: 200
            minimum: 1
            default: 50
            title: Limit
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PaginatedUsersResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    PaginatedUsersResponse:
      properties:
        items:
          items:
            $ref: '#/components/schemas/PublicUserResponse'
          type: array
          title: Items
        nextCursor:
          anyOf:
            - type: string
            - type: 'null'
          title: Nextcursor
      type: object
      required:
        - items
      title: PaginatedUsersResponse
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    PublicUserResponse:
      properties:
        userId:
          type: string
          title: Userid
        firstName:
          anyOf:
            - type: string
            - type: 'null'
          title: Firstname
        lastName:
          anyOf:
            - type: string
            - type: 'null'
          title: Lastname
        email:
          anyOf:
            - type: string
            - type: 'null'
          title: Email
        phoneNumber:
          anyOf:
            - type: string
            - type: 'null'
          title: Phonenumber
        role:
          type: string
          title: Role
          description: responder | user | visitor (from response_level)
        accessLevel:
          anyOf:
            - type: string
            - type: 'null'
          title: Accesslevel
          description: user | admin | enterprise_admin | partner_admin | super_admin
        status:
          anyOf:
            - type: string
            - type: 'null'
          title: Status
          description: >-
            Account lifecycle: active | invited | password_reset_required |
            unknown (derived from Cognito status, not the internal new|member
            flag).
        profilePhotoUrl:
          anyOf:
            - type: string
            - type: 'null'
          title: Profilephotourl
        ownedDeviceId:
          anyOf:
            - type: string
            - type: 'null'
          title: Owneddeviceid
        ownedDeviceName:
          anyOf:
            - type: string
            - type: 'null'
          title: Owneddevicename
        enterpriseId:
          anyOf:
            - type: string
            - type: 'null'
          title: Enterpriseid
        enterpriseName:
          anyOf:
            - type: string
            - type: 'null'
          title: Enterprisename
        partnerId:
          anyOf:
            - type: string
            - type: 'null'
          title: Partnerid
        partnerName:
          anyOf:
            - type: string
            - type: 'null'
          title: Partnername
        createdAt:
          anyOf:
            - type: string
            - type: 'null'
          title: Createdat
        lastLoginAt:
          anyOf:
            - type: string
            - type: 'null'
          title: Lastloginat
      type: object
      required:
        - userId
        - role
      title: PublicUserResponse
      description: >-
        Curated user shape for the public org-users listing.


        `role` mirrors the Admin Portal's "Role" column (derived from
        response_level):

        `responder | user | visitor`. `accessLevel` is the separate admin tier.

        ownedDevice* are per-org (from UserOrgLinkDBModel). Internal
        control-plane

        fields (cognitoStatus, adminPrivileges, mfa, isAdminRescue) are omitted.
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: rk_live_<8hex><64hex>

````