NetBox users API is one of 14 APIs that NetBox publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include users. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.
This API exposes
56 operations
across 14 paths,
and defines 32 schemas.
It is described by OpenAPI 3.0.3, at version 4.5.9 (4.5).
Requests are made against the base URL https://demo.netbox.dev/api.
56 operations14 paths32 schemas12 DELETE13 GET12 PATCH7 POST12 PUT
Metadata
The identity and technical contract details declared by the specification.
Specification
OpenAPI 3.0.3
API Version
4.5.9 (4.5)
Base URL
https://demo.netbox.dev/api
Authentication
API Key, API Key
License
Apache v2 License
Resource Areas
1
Authentication & Security 2
NetBox users API declares
2 security schemes
for authenticating requests.
An API key is passed in the cookie as sessionid (cookieAuth).
An API key is passed in the header as Authorization (tokenAuth).
tokenAuth — Token (v1) or Bearer . (v2)
Paths & Operations 56
Across 14 paths, the API surfaces 56 operations — 12 DELETE, 13 GET, 12 PATCH, 7 POST, 12 PUT. Each is listed below with its method, path, parameters, and response codes.
users 56
GET
/api/users/config/
An API endpoint via which a user can update his or her own UserConfig data (but no one else's).
users_config_retrieve→ 200
GET
/api/users/groups/
Get a list of group objects.
users_groups_list47 params→ 200
POST
/api/users/groups/
Post a list of group objects.
users_groups_createbody→ 201
PUT
/api/users/groups/
Put a list of group objects.
users_groups_bulk_updatebody→ 200
PATCH
/api/users/groups/
Patch a list of group objects.
users_groups_bulk_partial_updatebody→ 200
DELETE
/api/users/groups/
Delete a list of group objects.
users_groups_bulk_destroybody→ 204
GET
/api/users/groups/{id}/
Get a group object.
users_groups_retrieve1 param→ 200
PUT
/api/users/groups/{id}/
Put a group object.
users_groups_update1 parambody→ 200
PATCH
/api/users/groups/{id}/
Patch a group object.
users_groups_partial_update1 parambody→ 200
DELETE
/api/users/groups/{id}/
Delete a group object.
users_groups_destroy1 param→ 204
GET
/api/users/owner-groups/
Get a list of owner group objects.
users_owner_groups_list37 params→ 200
POST
/api/users/owner-groups/
Post a list of owner group objects.
users_owner_groups_createbody→ 201
PUT
/api/users/owner-groups/
Put a list of owner group objects.
users_owner_groups_bulk_updatebody→ 200
PATCH
/api/users/owner-groups/
Patch a list of owner group objects.
users_owner_groups_bulk_partial_updatebody→ 200
DELETE
/api/users/owner-groups/
Delete a list of owner group objects.
users_owner_groups_bulk_destroybody→ 204
GET
/api/users/owner-groups/{id}/
Get a owner group object.
users_owner_groups_retrieve1 param→ 200
PUT
/api/users/owner-groups/{id}/
Put a owner group object.
users_owner_groups_update1 parambody→ 200
PATCH
/api/users/owner-groups/{id}/
Patch a owner group object.
users_owner_groups_partial_update1 parambody→ 200
DELETE
/api/users/owner-groups/{id}/
Delete a owner group object.
users_owner_groups_destroy1 param→ 204
GET
/api/users/owners/
Get a list of owner objects.
users_owners_list49 params→ 200
POST
/api/users/owners/
Post a list of owner objects.
users_owners_createbody→ 201
PUT
/api/users/owners/
Put a list of owner objects.
users_owners_bulk_updatebody→ 200
PATCH
/api/users/owners/
Patch a list of owner objects.
users_owners_bulk_partial_updatebody→ 200
DELETE
/api/users/owners/
Delete a list of owner objects.
users_owners_bulk_destroybody→ 204
GET
/api/users/owners/{id}/
Get a owner object.
users_owners_retrieve1 param→ 200
PUT
/api/users/owners/{id}/
Put a owner object.
users_owners_update1 parambody→ 200
PATCH
/api/users/owners/{id}/
Patch a owner object.
users_owners_partial_update1 parambody→ 200
DELETE
/api/users/owners/{id}/
Delete a owner object.
users_owners_destroy1 param→ 204
GET
/api/users/permissions/
Get a list of permission objects.
users_permissions_list66 params→ 200
POST
/api/users/permissions/
Post a list of permission objects.
users_permissions_createbody→ 201
PUT
/api/users/permissions/
Put a list of permission objects.
users_permissions_bulk_updatebody→ 200
PATCH
/api/users/permissions/
Patch a list of permission objects.
users_permissions_bulk_partial_updatebody→ 200
DELETE
/api/users/permissions/
Delete a list of permission objects.
users_permissions_bulk_destroybody→ 204
GET
/api/users/permissions/{id}/
Get a permission object.
users_permissions_retrieve1 param→ 200
PUT
/api/users/permissions/{id}/
Put a permission object.
users_permissions_update1 parambody→ 200
PATCH
/api/users/permissions/{id}/
Patch a permission object.
users_permissions_partial_update1 parambody→ 200
DELETE
/api/users/permissions/{id}/
Delete a permission object.
users_permissions_destroy1 param→ 204
GET
/api/users/tokens/
Get a list of token objects.
users_tokens_list71 params→ 200
POST
/api/users/tokens/
Post a list of token objects.
users_tokens_createbody→ 201
PUT
/api/users/tokens/
Put a list of token objects.
users_tokens_bulk_updatebody→ 200
PATCH
/api/users/tokens/
Patch a list of token objects.
users_tokens_bulk_partial_updatebody→ 200
DELETE
/api/users/tokens/
Delete a list of token objects.
users_tokens_bulk_destroybody→ 204
GET
/api/users/tokens/{id}/
Get a token object.
users_tokens_retrieve1 param→ 200
PUT
/api/users/tokens/{id}/
Put a token object.
users_tokens_update1 parambody→ 200
PATCH
/api/users/tokens/{id}/
Patch a token object.
users_tokens_partial_update1 parambody→ 200
DELETE
/api/users/tokens/{id}/
Delete a token object.
users_tokens_destroy1 param→ 204
POST
/api/users/tokens/provision/
Non-authenticated REST API endpoint via which a user may create a Token.
users_tokens_provision_createbody→ 201401
GET
/api/users/users/
Get a list of user objects.
users_users_list91 params→ 200
POST
/api/users/users/
Post a list of user objects.
users_users_createbody→ 201
PUT
/api/users/users/
Put a list of user objects.
users_users_bulk_updatebody→ 200
PATCH
/api/users/users/
Patch a list of user objects.
users_users_bulk_partial_updatebody→ 200
DELETE
/api/users/users/
Delete a list of user objects.
users_users_bulk_destroybody→ 204
GET
/api/users/users/{id}/
Get a user object.
users_users_retrieve1 param→ 200
PUT
/api/users/users/{id}/
Put a user object.
users_users_update1 parambody→ 200
PATCH
/api/users/users/{id}/
Patch a user object.
users_users_partial_update1 parambody→ 200
DELETE
/api/users/users/{id}/
Delete a user object.
users_users_destroy1 param→ 204
Schemas 32
The contract defines 32 schemas that model the data the API accepts and returns. The most detailed are Token (15 properties), TokenProvision (14 properties), User (13 properties), ObjectPermission (12 properties). Each schema is shown below with its type and property counts.
PaginatedObjectPermissionList
object
4 properties2 required
Token
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
15 properties7 required
OwnerGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
2 properties1 required
BriefOwnerGroup
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
5 properties4 required
PatchedOwnerRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
5 properties
BriefUserRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
1 property1 required
PaginatedOwnerGroupList
object
4 properties2 required
PatchedGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
3 properties
PaginatedTokenList
object
4 properties2 required
PaginatedOwnerList
object
4 properties2 required
NestedGroup
object
Represents an object related through a ForeignKey field. On write, it accepts a primary key (PK) value or a dictionary of attributes which can be used to uniqu…
5 properties5 required
UserRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
10 properties2 required
TokenProvision
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
14 properties8 required
ObjectPermissionRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties3 required
PatchedObjectPermissionRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties
PatchedOwnerGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
2 properties
BriefUser
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
4 properties4 required
PaginatedUserList
object
4 properties2 required
ObjectPermission
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
12 properties7 required
PatchedUserRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
10 properties
PaginatedGroupList
object
4 properties2 required
GroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
3 properties1 required
Group
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties6 required
OwnerRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
5 properties2 required
OwnerGroup
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
7 properties6 required
User
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
13 properties5 required
TokenProvisionRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
8 properties2 required
TokenRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
9 properties1 required
NestedUser
object
Represents an object related through a ForeignKey field. On write, it accepts a primary key (PK) value or a dictionary of attributes which can be used to uniqu…
5 properties5 required
BriefOwnerGroupRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
2 properties1 required
PatchedTokenRequest
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
9 properties
Owner
object
Extends the built-in ModelSerializer to enforce calling fullclean() on a copy of the associated instance during validation. (DRF does not do this by default; s…
9 properties6 required
Specification
The full machine-readable OpenAPI contract behind this narrative.