blumira-users

# Blumira Users ## Overview Blumira users are organization members who can access the portal, investigate findings, and manage the environment. This skill covers user listing and lookup, primarily for finding assignment workflows. ## Anti-triggers - **The end user named in a finding** — these are Blumira *portal* members (your analysts), not the M365 or AD account that triggered a detection. Look that account up in `cipp-users` or `inforcer-identity-governance`. - **Creating, disabling, or offboarding anyone** — Blumira's user surface is list-only; account lifecycle is `cipp-users`. - **Users in a managed client account** — `blumira_users_list` is an `/org/*` call; use `blumira_msp_users_list` in `blumira-msp`. ## Key Concepts ### User Roles Users have roles that determine their permissions within the Blumira organization. The API exposes user identity and metadata for assignment and audit purposes. ### User IDs User IDs (UUIDs) are required when assigning findings to specific analysts. Use `blumira_users_list` to look up IDs. ## API Patterns ### List Users ``` blumira_users_list page_size=50 ``` Response includes user ID, name, email, and role information. ### Filter Users ``` blumira_users_list email.contains=@company.com ``` ## Common Workflows ### Find User for Assignment 1. `blumira_users_list` to get all users 2. Identify the appropriate analyst by name or role 3. Use their `user_id` with `blumira_findings_assign` ### User Access Audit ...