Getting user info
Note
Only users with the organization-manager.admin or organization-manager.organizations.owner role can get a user ID or email. To learn how to grant a role to a user, see the Roles section.
Yandex account users and federated users
To get information about a Yandex account user or a federated user:
-
Go to Yandex Identity Hub.
-
In the left-hand panel, select Users. The page will display a list of organization users with the following fields:
-
User: User full name.
-
Username: User login.
-
Status: Current user status:
Active: Active user.Inactive: Inactive user.
-
Credential provider: Information about the user's identity provider:
- For federated users: Identity federation name.
- For local users: User pool name.
- For users with a Yandex account:
Yandex ID.
-
Last authentication: Date and time of federated or local user's last authentication in Yandex Cloud.
-
ID: User ID.
-
Email: User email address.
Note
Some fields may not be displayed. To set up field display, click in the top-right corner of the user list, select the fields, and click Apply.
You can also re-order the fields by dragging them with your mouse.
-
-
Locate the user in the list. Use the filter or search bar at the top of the screen as needed.
-
Click the row with the name for details about the user and the user's groups, MFA factors (for federated and local users), OS Login profiles, and SSH keys.
If you do not have the Yandex Cloud CLI installed yet, install and initialize it.
By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id parameter.
-
See the description of the command to get information about an organization's users:
yc organization-manager user list --help -
To get information about organization users, run the command below and specify the organization ID:
yc organization-manager user list \ --organization-id <organization_ID>Result:
+----------------------+----------+--------------------+----------------------+-----------------------+ | ID | USERNAME | EMAIL | FEDERATION ID | LAST AUTHENTICATED AT | +----------------------+----------+--------------------+----------------------+-----------------------+ | ajeebjmlsdk9******** | hatter | hatter@yandex.ru | | 2025-09-06T19:10:00Z | | bsdeoujmzsdk******** | alice | alice@mydomain.com | bpfsuecgv39i******** | 2025-06-04T09:23:00Z | +----------------------+----------+--------------------+----------------------+-----------------------+
To get information about organization users, use the listMembers REST API method for the User resource or the UserService/ListMembers gRPC API call.
Local users
Note
This feature is at the Preview stage.
To get information about a local user:
-
Go to Yandex Identity Hub.
-
In the left-hand panel, select Users. The page will display a list of organization users with the following fields:
-
User: User full name.
-
Username: User login.
-
Status: Current user status:
Active: Active user.Inactive: Inactive user.
-
Credential provider: Information about the user's identity provider:
- For federated users: Identity federation name.
- For local users: User pool name.
- For users with a Yandex account:
Yandex ID.
-
Last authentication: Date and time of federated or local user's last authentication in Yandex Cloud.
-
ID: User ID.
-
Email: User email address.
Note
Some fields may not be displayed. To set up field display, click in the top-right corner of the user list, select the fields, and click Apply.
You can also re-order the fields by dragging them with your mouse.
-
-
Locate the user in the list. Use the filter or search bar at the top of the screen as needed.
-
Click the row with the name for details about the user and the user's groups, MFA factors (for federated and local users), OS Login profiles, and SSH keys.
If you do not have the Yandex Cloud CLI installed yet, install and initialize it.
By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id parameter.
-
See the description of the CLI command for getting pool user info:
yc organization-manager idp user get --help -
To get a list of pools in an organization, provide its ID in this command:
yc organization-manager idp userpool list \ --organization-id <organization_ID>Result:
+----------------------+--------------+-------------+----------------------+---------------------+ | ID | NAME | DESCRIPTION | ORGANIZATION ID | CREATED AT | +----------------------+--------------+-------------+----------------------+---------------------+ | ek0o6g0irskn******** | sample-pool1 | | bpf2c65rqcl8******** | 2025-05-17 10:01:04 | | ek03mf01jr4z******** | sample-pool2 | | bpf2c65rqcl8******** | 2025-06-28 16:30:23 | +----------------------+--------------+-------------+----------------------+---------------------+ -
To get the IDs and other information about pool users, provide the pool ID in the following command:
yc organization-manager idp user list \ --userpool-id <user_pool_ID>Result:
+----------------------+----------------------------------------+-----------+----------------------+-----------+---------------------+ | ID | USERNAME | FULL NAME | USERPOOL ID | IS ACTIVE | CREATED AT | +----------------------+----------------------------------------+-----------+----------------------+-----------+---------------------+ | aje3i1gq49n3******** | test-user1@test.ru.idp.yandexcloud.net | User 1 | ek0o6g0irskn******** | true | 2025-10-07 10:41:54 | | aje0j5mts02t******** | test-user2@test.ru.idp.yandexcloud.net | User 2 | ek0o6g0irskn******** | false | 2025-07-16 11:18:57 | +----------------------+----------------------------------------+-----------+----------------------+-----------+---------------------+ -
To get information about a specific user, run the command below and specify the user ID:
yc organization-manager idp user get <user_ID>Result:
id: aje0j5mts02t******** userpool_id: ek0o6g0irskn******** status: SUSPENDED username: test-user2@test.ru.idp.yandexcloud.net full_name: User 2 given_name: Mad family_name: Hatter email: testuser@test.com phone_number: "+74991234567" created_at: "2025-07-16T11:18:57.679246Z" updated_at: "2025-10-13T08:14:23.764152Z"
To get information about organization users, use the get REST API method for the User resource or the UserService/Get gRPC API call.