Groups

Managed groups, static and dynamic, and their resolved members.

📄️List groups with pagination

Retrieve a paginated list of groups, including managed (static/dynamic) and system (role/ou) groups. Ordered newest first, by created_at then id, so pages stay disjoint for a client stitching them together.

📄️Create a managed group

Create a managed group; kind must be static or dynamic (system kinds role/ou are rejected).

📄️List the groups a user belongs to

Reverse lookup of a user's group memberships: returns the active groups the user is a materialized member of (static and dynamic kinds; system role/ou groups are projected elsewhere). Gated by groups:read.

📄️Get group by code

Retrieve a single group by code; pass kind to disambiguate when a code is shared across kinds.

📄️Update a managed group

Update a managed group; system groups (role/ou) are read-only and rejected.

📄️Deactivate a managed group

Soft delete (deactivate) a managed group; system groups (role/ou) are read-only and rejected.

📄️List resolved members of a group (paginated)

Retrieve one page of a group's resolved members with display fields, unioned and deduped across membership sources. Members are read from the materialized membership rows, so the page is bounded and indexed (role/ou groups included) rather than projected live.