AssetCenter
Users and invitations
Manage organization membership and access with a customer API key.
Last updated
Organization membership
The user API manages login users in the organization attached to your key. Inventory people are separate records and do not grant login access. These endpoints use https://my.assetcenter.app/api/v1; changing the key creator’s selected organization does not change their scope.
List members, read a user, look up permission options, update organization permissions, or remove membership.
Global profile changes, passwords and password-reset emails, user activation, individual two-factor settings, and global account deletion remain app/user-authenticated operations. Integrations cannot change or remove their token creator.
Permissions
| Permission | Allows |
|---|---|
users:read |
List/read members and list unaccepted invitations. |
users:permissions |
Look up categories and change organization roles, member permissions, and category access. |
users:delete |
Remove a membership while preserving the user account. |
users:invite |
Create, resend, and revoke invitations; social-login organizations add members directly. |
These permissions are independent. Managing roles can grant full administrator access to the organization. New Read Only keys include users:read; Full Access keys include all four. Existing keys keep their current permissions, so issue a replacement key to add user access.
Invitations
List invitations, invite a user, resend an invitation, or revoke an invitation.
Password organizations send 24-hour invitations. Google and Microsoft organizations add users directly. Members plus unexpired invitations count toward the user limit. Responses never expose invitation tokens or acceptance URLs.
Retries and removal
Every user or invitation write requires Idempotency-Key and supports the same 24-hour retry rules as other customer workflows. Replays do not send duplicate invitation emails.
Removing a membership preserves the user account and other organizations, even when no memberships remain. Demotion or removal revokes that user’s integration keys only for this organization. The organization must retain an active administrator.