CESNET

CESNET Users Manager API

UsersManager RPC API in Perun

GitHub OpenAPI

Operations 89

GET /json/usersManager/getUserById Returns user by its id #
GET /json/usersManager/getSponsorsForMember/member Gets sponsors for given member with optional attribute names #
GET /json/usersManager/getSponsorsForMember/vo Gets sponsors for member specified by VO, extSourceName and extLogin with… #
GET /json/usersManager/getUserByExtSourceNameAndExtLogin Returns user by its ExtSourceName and ExtLogin #
GET /json/usersManager/getRichUserWithAttributes Returns user with attributes #
GET /json/usersManager/getUsers Returns all users #
GET /json/usersManager/getAllRichUsersWithAttributes Returns users with attributes #
GET /json/usersManager/getRichUsersByIds Returns rich users without attributes by their IDs #
GET /json/usersManager/getRichUsersWithAttributesByIds Returns rich users with attributes by their IDs #
GET /json/usersManager/getUserExtSources Gets list of all user's external sources #
POST /json/usersManager/checkPasswordStrength Check password strength for the given namespace. #
GET /json/usersManager/getGroupsWhereUserIsActive/facility Get list of groups of user on specified facility where use is active #
GET /json/usersManager/getGroupsWhereUserIsActive/resource Get list of groups of user on specified resource where use is active #
GET /json/usersManager/getRichGroupsWhereUserIsActive/facility Get list of groups of user on specified facility where use is active #
GET /json/usersManager/getRichGroupsWhereUserIsActive/resource Get list of groups of user on specified resource where use is active #
GET /json/usersManager/findUsers Returns list of Users with attributes who matches the searchString, searching… #
GET /json/usersManager/findRichUsers Returns list of RichUsers with attributes who matches the searchString… #
GET /json/usersManager/findRichUsersWithAttributes Returns list of RichUsers with attributes who matches the searchString #
GET /json/usersManager/getRichUsersWithoutVoWithAttributes Returns list of RichUsers which are not members of any VO with attributes #
GET /json/usersManager/getVosWhereUserIsMember Returns list of VOs, where the user is a Member #
GET /json/usersManager/getVosWhereUserIsAdmin Returns list of VOs, where the user is an Administrator. #
GET /json/usersManager/getGroupsWhereUserIsAdmin/u Returns list of Groups in Perun, where the User is a direct Administrator or he… #
GET /json/usersManager/getGroupsWhereUserIsAdmin/u-v Returns list of Groups in selected Vo, where the User is a direct Administrator… #
GET /json/usersManager/getRichUserExtSources/u Gets list of all user's external sources with attributes #
POST /json/usersManager/createAlternativePassword Creates alternative password in external system #
POST /json/usersManager/deleteAlternativePassword Deletes alternative password in external system #
POST /urlinjsonout/usersManager/updateUserExtSourceLastAccess Updates user's userExtSource last access time in DB. #
POST /urlinjsonout/usersManager/removeUserExtSource Remove user's external source. #
POST /urlinjsonout/usersManager/removeUserExtSources Remove user's external sources. #
GET /json/usersManager/getUserExtSourceById Returns user ext source by its id #
GET /json/usersManager/getUserExtSourceByExtLoginAndExtSourceName Returns user's external source by the user's external login and external source… #
GET /json/usersManager/getUserExtSourcesByIds Returns list of user ext sources by their ids #
GET /json/usersManager/getUserExtSourceByUniqueAttributeValue/id Return userExtSource for specific attribute definition (specified by id) and… #
GET /json/usersManager/getUserExtSourceByUniqueAttributeValue/name Return userExtSource for specific attribute definition (specified by name) and… #
POST /urlinjsonout/usersManager/requestPreferredEmailChange Request to change preferred email address of user. #
POST /json/usersManager/addUserExtSource Adds user's external sources #
POST /json/usersManager/addUserExtSourceWithAttributes Adds user's external source along with the given attributes #
POST /json/usersManager/validatePreferredEmailChange Validate new preferred email address. #
GET /json/usersManager/getPendingPreferredEmailChanges Return list of email addresses of user, which are awaiting validation and are… #
GET /json/usersManager/getAssignedRichResources Get all rich resources where the user is assigned. #
GET /json/usersManager/getAssociatedResources Get all resources associated with the user on the facility #
GET /json/usersManager/getUsersByIds Returns list of Users by their ids #
GET /json/usersManager/getSpecificUsersByUser Get all specific users who are owned by the user #
POST /urlinjsonout/usersManager/addSpecificUserOwner Add specific user owner #
POST /urlinjsonout/usersManager/moveUserExtSource Move UserExtSource from one user to another #
POST /urlinjsonout/usersManager/removeSpecificUserOwner Remove specific user owner #
GET /json/usersManager/getUsersBySpecificUser Return all users who owns the specific user #
GET /json/usersManager/getUnanonymizedUsersBySpecificUser Return all users who owns the specific user and are not anonymized #
POST /json/usersManager/updateUser Updates user #
POST /json/usersManager/createServiceUser From given candidate, creates a service user and assign given owners to him #
POST /json/usersManager/checkPasswordResetRequestIsValid/token Checks if the password reset request is valid #
POST /json/usersManager/changeNonAuthzPassword/token Changes user password in defined login-namespace based on token parameter #
POST /json/usersManager/reservePassword/login Reserves password for a user in specified login-namespace #
POST /json/usersManager/reservePassword/user Reserves password for a user in specified login-namespace #
POST /urlinjsonout/usersManager/validatePassword/login Validate password for a user in specified login-namespace #
POST /urlinjsonout/usersManager/validatePassword/user Validate password for a user in specified login-namespace #
POST /urlinjsonout/usersManager/deletePassword/login Delete password for a user in specified login-namespace #
POST /urlinjsonout/usersManager/deletePassword/user Delete password for a user in specified login-namespace #
POST /json/usersManager/changePassword/login Changes password for a user in specified login-namespace #
POST /json/usersManager/changePassword/user Changes password for a user in specified login-namespace #
POST /urlinjsonout/usersManager/loginExist Check wheter login exists in specified login-namespace. #
POST /urlinjsonout/usersManager/setLogin Set new login in namespace if login is available and user doesn't have login in… #
POST /urlinjsonout/usersManager/setSpecificUser Set specific user type for specific user and set ownership of this user to the… #
POST /urlinjsonout/usersManager/unsetSpecificUser Remove all ownerships of this specific user and unset this specific user type… #
POST /urlinjsonout/usersManager/deleteUser Deletes a user #
POST /urlinjsonout/usersManager/anonymizeUser Anonymizes user - according to configuration, each of user's attributes is… #
POST /urlinjsonout/usersManager/isLoginAvailable Checks if the login is available in the namespace. Return 1 if yes, 0 if no #
POST /urlinjsonout/usersManager/blockLogins Block logins for given namespace or block logins globally (if no namespace is… #
POST /json/usersManager/blockLogins Block logins for given namespace or block logins globally (if no namespace is… #
POST /urlinjsonout/usersManager/unblockLogins Unblock logins for given namespace or unblock logins globally (if no namespace… #
POST /json/usersManager/unblockLogins Unblock logins for given namespace or unblock logins globally (if no namespace… #
POST /urlinjsonout/usersManager/unblockLoginsById Unblock logins by id #
POST /json/usersManager/unblockLoginsById Unblock logins by id. #
POST /json/usersManager/getBlockedLoginsPage Get page of blocked logins #
GET /json/usersManager/getAllBlockedLoginsInNamespaces Returns all blocked logins in namespaces (if namespace is null, then this login… #
POST /urlinjsonout/usersManager/reserveRandomPassword Reserves a random password in external authz system. #
POST /json/usersManager/getUsersPage Get page of users with the given attributes #
POST /urlinjsonout/usersManager/generateAccount/name Generates user account in a backend system associated with login-namespace in… #
GET /json/usersManager/getUserRelations Gets map with 2 items which are a list of all vos and a list of all groups… #
POST /urlinjsonout/usersManager/changeOrganization Change organization from which user came to organization from user ext source #
POST /urlinjsonout/usersManager/changeOrganizationCustom Change organization from which user came to custom organization. #
POST /urlinjsonout/usersManager/changeName Change user's name to user's name from user ext source #
POST /urlinjsonout/usersManager/changeNameCustom Change user's name to custom name. #
POST /urlinjsonout/usersManager/changeEmail Change user's email to email from user ext source #
POST /urlinjsonout/usersManager/changeEmailCustom Change user's email to custom email. #
GET /json/usersManager/getAllowedResources Get all resources on the facility where the user is allowed. #
POST /json/usersManager/reserveLogin/user Reserve login in a namespace for given userId #
POST /json/usersManager/reserveLogin Reserve login in a namespace for given identifier and issuer #
POST /json/usersManager/deleteReservedLogin Deletes login reservation for given namespace and login #

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/openapi/cesnet-usersmanager-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/CESNET/perun
📦
GitHubRepository
https://github.com/CESNET/exafs

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/json-schema/cesnet-application-form-item-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/json-schema/cesnet-perun-notif-template-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/json-schema/cesnet-application-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/json-schema/cesnet-registrar-application-input-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/json-schema/cesnet-applications-page-query-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/json-schema/cesnet-publication-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cesnet:cesnet-usersmanager-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cesnet-usersmanager-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Cesnet Users Manager API
  version: 0.0.0
  contact:
    url: https://perun-aai.org
    email: perun@cesnet.cz
  description: 'Operations tagged UsersManager across 2 of this provider''s published API definitions: cesnet-perun-rpc-openapi.yml, cesnet-perun-rpc-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://{server}/{authentication}/rpc
  description: Perun RPC server
  variables:
    server:
      default: api-dev.perun-aai.org
      description: DNS name of a Perun server
    authentication:
      default: ba
      description: 'way of authentication:

        ba - HTTP Basic Auth

        krb - Kerberos

        non - no authentication

        cert - X509 client certificate

        oauth - OAuth 2.0 bearer access token

        fed - SAML federation

        '
      enum:
      - ba
      - krb
      - non
      - cert
      - oauth
      - fed
security:
- BasicAuth: []
- BearerAuth: []
tags:


# --- truncated at 32 KB (135 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cesnet/refs/heads/main/openapi/cesnet-usersmanager-api-openapi.yml