To get data for a single user resource, the GET /environments/{{envID}}/users/{{userID}} operation returns data only for the user resource with the ID specified in the request URL.

You must have the Identity Data Admin role to read group membership. For more information about groups, see Groups.

Important: If the user authenticates with an authoritative identity provider (the identity provider has a registration.population.id value set), their password state will not be returned with a self-service request.

Query parameters

Parameter	Description
`expand=population`	Returns information about the user’s population assignment.
`include=memberOfGroupNames`	Includes all groups to which the user belongs, by group name.
`include=memberOfGroupIDs`	Includes all groups to which the user belongs, by group ID.