Returns a single user's profile, derived user_type, role, assigned locations (as {value,label} options) and assigned accounts. user_id must belong to the caller's company (an ownership check).

Auth

• Authenticated account user — collection bearer token; The endpoint scopes user_id to the caller's company by the validation rule.

Rate limit

• No rate limit.

Body

Behaviour

• 200 returns data.response. location/accounts are {value,label} option objects for form pre-fill.
• 404 User not found. when the id resolves to no user.
• 422 when user_id is missing or outside scope.