Manage user accounts. The action field controls the operation:
create_user — Create a new user accountupdate — Update user detailsdelete_user — Delete a user accounttoggle_status — Enable or disable a userupdate_role — Assign a different roleterminate_session — End a specific sessionadd_to_blacklist / remove_from_blacklist — Manage access blacklistbulk_update — Update multiple userscomplete_onboarding — Mark onboarding completescan_user_password — Check password against breach databaseRequired permission: api.users.users.manage
All API requests must include a valid Bearer token in the Authorization header.
Tokens are 64-character SHA-256 session hashes issued by the PropOps authentication system.
Example:
Authorization: Bearer a1b2c3d4e5f6...
"User_001"
"Surname_001"
"user001@example.com"
"S3cureP@ssword!"
1=Staff, 2=Agent, 3=Landlord, 4=Tenant, 5=Contractor
1
"abc123def456"
"07700000001"
1
2