The call returns a list of the Veracode user accounts in your organization.

Before using this API, Veracode strongly recommends that you read API Usage and Access Guidelines.

Resource URL


Non-human user accounts require the Admin API role to use this call. Human user accounts require the Administrator role to use this call.


There are no required parameters. Use the following parameters to filter the list:

first_name String.
last_name String.
custom_id String.
email_address Valid email address.
login_account_type user or api.
phone String.
teams Comma-delimited string. This filter only returns users matching all the listed team names.
roles Comma-delimited string. Case-sensitive. You can filter on theses human user roles: Administrator, Creator, Executive, Mitigation Approver, Policy Administrator, Reviewer, Security Lead, Submitter, Security Insights, eLearning. This filter only returns users that match all of the listed teams.

You can apply scan permissions to these types of scans: Static Analysis, DynamicDS, DynamicMP, Discovery, manual, and Dynamic Analysis.

is_saml_user Boolean.
login_enabled Boolean.
requires_token Boolean.
is_elearning_manager Boolean.
elearning_manager String. The first and last name (not the username) of the Veracode eLearning manager. For example, Mary Doe.
elearning_track String. The Veracode eLearning track name.
elearning_curriculum String. The Veracode eLearning curriculum name.
keep_elearning_active Boolean.
custom_one String. Custom field.
custom_two String. Custom field.
custom_three String. Custom field.
custom_four String. Custom field.
custom_five String. Custom field.

HTTPie Example

http --auth-type=veracode_hmac -o userlist.xml "" "login_enabled==true" "roles==Creator,Submitter"

HTTPie Results

The call returns a comma-delimited list of usernames in the userlist XML document, which references the userlist.xsd. Additional userlist.xsd schema documentation is available. Use the XSD file to validate the XML data.
<?xml version="1.0" encoding="UTF-8"?>

<userlist xmlns:xsi="http&#x3a;&#x2f;&#x2f;;2001&#x2f;XMLSchema-instance" 
      https&#x3a;&#x2f;&#x2f;;resource&#x2f;3.0&#x2f;userlist.xsd" userlist_version="3.0" 
      account_id="<account id"><filters/>
   <users usernames="aswallowtail&#x40;,lpieris&#x40;,sviceroy&#x40;,