API: Get FileRun user account information
| Target URL | /api.php/Core/!admin/users/info |
| Required scope | admin |
| HTTP Method | POST |
| Output format | JSON |
Request Parameters Reference
| Parameter | Type | Required | Description |
|---|---|---|---|
| UID | integer | Yes, if uname not provided |
User ID |
| uname | string | Yes, if UID not provided |
Username |
The administrator must be allowed to manage the account.
The response
The account is returned in data. Since FileRun 2026.3.0 the record no longer carries the password hash and the two-step authentication secrets. The fields:
| Field | Type | Description |
|---|---|---|
| id | integer | |
| public_id | string | |
| special_type | string or null | guest for a guest account, superuser for the superuser, null for a regular account |
| username | string | |
| require_2fa | boolean (1/0) | Whether two-step authentication is required for the account |
| require_email_otp | boolean (1/0) | Whether every sign-in ends with a second step, see the add endpoint. Since FileRun 2026.4.0. |
| has_passkeys | boolean (1/0) | |
| last_pass_change | datetime | |
| owner | integer or null | The ID of the independent administrator who owns the account |
| registration_date | datetime | |
| activated | boolean (1/0) | |
| expiration_date | datetime or null | |
| require_password_change | boolean (1/0) | |
| failed_password_attempts | integer | |
| last_pass_attempt | datetime or null | |
| failed_2fa_attempts | integer | |
| last_web_ui_access | datetime or null | The last time the account opened the web interface. Named last_access_date before FileRun 2026.4.0. |
| last_seen | integer or null | The time of the last request of the account of any kind, as a Unix timestamp, updated at most once an hour. Since FileRun 2026.4.0. |
| last_login_date | datetime or null | |
| last_logout_date | datetime or null | |
| string | ||
| receive_notifications | boolean (1/0) | |
| language | string or null | The language of the e-mail messages to the account, null for the default language. Since FileRun 2026.4.0. |
| new_email | string or null | An e-mail address change which is waiting for confirmation |
| name | string | First name |
| name2 | string | Last name |
| phone | string | |
| company | string | |
| website | string | |
| description | string | |
| logo_url | string | |
| avatar | string or null | |
| perms | object | The permissions of the account, by the names the add endpoint takes. Since FileRun 2026.4.0 it holds the eight permissions which replace changes (edit_files, rename_move, delete_files, delete_folders, delete_permanently, collections, starring and write_metadata) and admin_shared_drives, and no longer readonly |
| groups | array | The ids of the groups the account is a member of |