Returns the full detail of a single partner user (identified by user_id) including derived user_type, role, assigned locations and assigned accounts. Only partner/account companies may call it, and the target must belong to the caller's company tree (an ownership check).

Auth

• Partner / account — collection bearer token. Gate: caller bundle_id ∈ {1,3}; user_id must belong to the caller's company (validation rule).

Rate limit

• No rate limit.

Body

Behaviour

• 200 returns data.response (the user object). user_type comes from the assignment flags: basic when the user covers all accounts, assign_brand when specific accounts are assigned, otherwise admin.
• 404 User not found. when the id resolves to no non-deleted person.
• 403 when the caller is not a partner/account company; 422 when user_id is missing or outside scope.