Team User Management
Lets enterprise tenant administrators provision, modify, and offboard team members from external identity systems. Built for SCIM-style automation: account aggregation, role updates, lifecycle (active / inactive / removed), and the Profile Migration workflow for taking ownership of a deactivated colleague’s data.Endpoints
List team members
Page through team members with status / delegation filters
Get member detail
Look up a single member by email or
team_user_idAdd a member
Create a new team member, auto-provisioning the underlying personal account if needed
Update status / role
Activate, deactivate, or change role; cascading reclaim of delegated profiles when deactivating
Delegate a profile
Hand a deactivated profile to an active member so they can take over its data
Reclaim a profile
Return a delegated profile to the deactivated pool
Rename a profile
Update a profile’s display name (useful for delegated profiles)
Remove a member
Permanently remove a team member; cascading reclaim of delegated profiles
User lifecycle
- ACTIVE — full access. Can be promoted/demoted via team.user.update (except
OWNER, which is API-immutable). - INACTIVE — disabled. Once inactive, a profile becomes eligible for delegation via team.user.delegate.
- REMOVED — terminal. Hard-deletes the user; cascades to reclaim profiles delegated to them.
Profile delegation
When an employee leaves, their account is deactivated and may then be delegated to an active teammate so the teammate can keep working on the data:- team.user.update sets
status: USER_STATUS_INACTIVEon the departing employee. - team.user.delegate hands
team_user_idtotarget_team_user_id. The delegated profile’s email is rewritten todelegate-<id>@manus.im; the original is preserved inoriginal_email. - team.user.rename (optional) gives the delegated profile a human-readable label.
- team.user.reclaim returns the profile to the deactivated pool — no data loss; can be re-delegated later.
cascade_affected[].
Operational notes
- Authentication:
X-API-Keywith key type Team User Management. See Authentication. - Owner is read-only: The team owner cannot be modified, deactivated, removed, or downgraded via the API. Transfer ownership in the UI first.
team_user_idis the stable handle: Once a profile is delegated, its email becomesdelegate-<id>@manus.im. Cache theteam_user_idfrom your initialteam.user.create/team.user.listresponse and use it for every subsequent profile operation.- Guest role does not consume a seat: Promoting
GUEST → MEMBER/ADMIN/SUPER_ADMINvia team.user.update calls Stripe to bump seat quantity; the reverse direction releases the seat implicitly. A Stripe failure during a paid promotion surfaces asinternaland the role change is rolled back. - Audit logging: Every call writes to the shared enterprise audit log, correlated by
request_idfrom the response envelope.