List Seats Usage
Get a list of tenant members (seats), including assigned policies and seat-denied invitees.
To remove a specific member returned from this call use the Remove Member API call.
Endpoint
GET /api/rbac/seatsUsage
Authentication
This endpoint requires API Key authentication via the Authorization header. The caller must have the admin role on the tenant.
Headers
Header
Required
Description
Authorization
Yes
Bearer token with your API key
X-Tenant-UUID
Yes
Tenant UUID (from the app URL tenantUUID=…, or Settings → Access)
Response
Response Schema
[
{
"email": "string",
"lastLogin": "string",
"isActive": true,
"firstLogin": "string",
"roleType": "string",
"policyUUIDs": ["string"],
"policyNames": ["string"],
"ssoDriven": false
}
]Field Descriptions
Field
Type
Description
email
string
Member email
lastLogin
string | null
ISO 8601 last login / last seen time
firstLogin
string | null
ISO 8601 first login time
isActive
boolean
true for active members; false for seat-blocked invitees
roleType
string
Effective role: admin, write, or read
policyUUIDs
array
Assigned policy UUIDs
policyNames
array
Assigned policy names (same order as UUIDs)
ssoDriven
boolean
Whether policies are driven by SSO
Examples
Basic Request
Response Example
Last updated
