The
users client methods are currently in BETA. The API may change without notice. A one-time warning is emitted on first use.Get method accepts either a user ID or an email address — emails are resolved via the users list endpoint (case-insensitive exact match). All other methods (Update, Delete, ResendInvitation, ResetPassword) take strict user IDs. Build role assignments for Create with AssignPredefinedRole (one of the UserRole* values) or AssignCustomRole (an existing custom role ID — see Roles).
List Users
List returns a paginated list of account users. Defaults to a page size of 50. Email, when non-empty, applies a case-insensitive substring filter. Status, when non-empty, filters by account status (any of UserStatusActive, UserStatusInvited, UserStatusExpired).
Signature:
Get a User
Get returns a single user. User accepts either a user ID or an email address; an email is resolved to an ID via the users list endpoint (case-insensitive exact match), and a non-matching email yields a *arize.ResourceNotFoundError.
Signature:
Create a User
Create creates a new account user and returns it. Build the Role with AssignPredefinedRole (one of the UserRole* values) or AssignCustomRole (a custom role ID). InviteMode controls whether and how an invitation is sent (InviteModeNone, InviteModeEmailLink, or InviteModeTemporaryPassword). When InviteMode is not InviteModeNone, the request is idempotent on Email — re-creating a user with the same email returns the existing user.
Signature:
Update a User
Update updates a user’s display name and/or developer permission by ID. Name and IsDeveloper are pointers — nil preserves the existing value. At least one of Name or IsDeveloper must be non-nil; otherwise the call returns an error without contacting the server.
Signature:
Delete a User
Delete soft-deletes a user by ID. Cascades to organization and space memberships, API keys, and role bindings. Idempotent: deleting an already-inactive user succeeds. It returns only an error.
Signature:
Resend Invitation
ResendInvitation resends the invitation email for a pending (invited) user. The target user must be in the UserStatusInvited state. It returns only an error.
Signature:
Reset Password
ResetPassword triggers a password-reset email for a user. The user must authenticate via password (not SSO/SAML) and must have verified their account. It returns only an error.
Signature:
Bulk Delete Users
BulkDelete deletes users by ID and/or email. At least one of UserIDs or Emails must be provided. Each email is resolved to a user ID client-side via the users list endpoint (case-insensitive exact match); an unresolved email is recorded as DeletionStatusNotFound rather than aborting the batch. Each deletion’s outcome is returned as a BulkUserDeletionResult — per-user failures are recorded as DeletionStatusFailed and do not abort the batch.
Signature: