[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > [Step-by-step guides](index.md) > Managing users > Getting user info

# Getting user info

{% note info %}

This guide requires you to use the [CLI](../../cli/index.md) if one or more of the following conditions are true:
* The **Block users from viewing the list of organization members and their details** option is [enabled](hide-user-info.md) in the organization's settings.
* The `organization.denyUserListing` [access policy](../../iam/concepts/access-control/access-policies.md) applies, which prohibits viewing the organization's user list.

{% endnote %}

{% note info %}

Only users with the `organization-manager.admin` or `organization-manager.organizations.owner` role can get a user ID or email. To learn how to grant a role to a user, see the [Roles](../security/index.md#add-role) section.

{% endnote %}

## Yandex account users and federated users {#yandex-and-federated} 

To get information about a [Yandex account](../../iam/concepts/users/accounts.md#passport) user or a [federated](../../iam/concepts/users/accounts.md#saml-federation) user:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Go to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![icon-users](../../_assets/console-icons/person.svg) **Users**. The page will display a list of organization users with the following fields:
  
      * **User**: User full name.
      * **Username**: User login.
      * **Status**: Current user status:
  
          * `Active`: Active user.
          * `Inactive`: Inactive user.
      * **Credential provider**: Information about the user's identity provider:
  
          * For federated users: [Identity federation](../concepts/add-federation.md) name.
          * For local users: [User pool](../concepts/user-pools.md) name.
          * For users with a Yandex account: `Yandex ID`.
      * **Last authentication**: Date and time of the user's last [authentication](../../iam/concepts/authorization/index.md) in Yandex Cloud. There may be no date if no authentication has yet taken place or if it happened before this feature was introduced.
  
          * For federated and local users, the date is displayed in the list and in the user card.
          * For users with a Yandex account, the date is displayed only in the card and only when viewed under the same user's name.
  
      * **ID**: User ID.
      * **Email**: User email address.
      * **Company name**: Name of the company the user works for.
      * **Department**: User’s division or department.
      * **Position**: User’s job title.
      * **Employee ID**: User’s digital code from the corporate HR system.
  
      {% note info %}
  
      Some fields may not be displayed. To set up field display, click ![gear](../../_assets/console-icons/gear.svg) in the top-right corner of the user list, select the fields, and click **Apply**.
  
      You can also re-order the fields by dragging them with your mouse.
  
      {% endnote %}
   
  1. Locate the user in the list. Use the filter or search bar at the top of the screen as needed.
  1. Click the row with the name for details about the user and the user's [groups](../concepts/groups.md), [MFA factors](../concepts/mfa.md#mfa-factors) (for federated and local users), [OS Login profiles](../concepts/os-login.md#os-login-profiles), and [SSH keys](../concepts/os-login.md#ssh-keys).

- CLI {#cli}

  If you do not have the Yandex Cloud CLI yet, [install and initialize it](../../cli/quickstart.md#install).

  The folder used by default is the one specified when [creating](../../cli/operations/profile/profile-create.md) the CLI profile. To change the default folder, use the `yc config set folder-id <folder_ID>` command. You can also specify a different folder for any command using `--folder-name` or `--folder-id`. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.

  1. See the description of the command to get information about an organization's users:

      ```bash
      yc organization-manager user list --help
      ```

  1. To get information about organization users, run the command below and specify the organization [ID](organization-get-id.md):

      ```bash
      yc organization-manager user list \
        --organization-id <organization_ID>
      ```

      Result:

      ```text
      +----------------------+----------+--------------------+----------------------+-----------------------+
      |          ID          | USERNAME |       EMAIL        |    FEDERATION ID     | LAST AUTHENTICATED AT |
      +----------------------+----------+--------------------+----------------------+-----------------------+
      | ajeebjmlsdk9******** | hatter   | hatter@yandex.ru   |                      | 2025-09-06T19:10:00Z  |
      | bsdeoujmzsdk******** | alice    | alice@mydomain.com | bpfsuecgv39i******** | 2025-06-04T09:23:00Z  |
      +----------------------+----------+--------------------+----------------------+-----------------------+
      ```

- API {#api}

  To get information about organization users, use the [listMembers](../api-ref/User/listMembers.md) REST API method for the [User](../api-ref/User/index.md) resource or the [UserService/ListMembers](../api-ref/grpc/User/listMembers.md) gRPC API call.

{% endlist %}

{% note info %}

The federated user's [attributes](setup-federation.md#claims-mapping) are loaded into their profile in the Yandex Identity Hub [organization](../concepts/organization.md) after the user's first authentication to Yandex Cloud.

{% endnote %}

## Local users {#local} 


To get information about a [local](../../iam/concepts/users/accounts.md#local) user:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Go to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![icon-users](../../_assets/console-icons/person.svg) **Users**. The page will display a list of organization users with the following fields:
  
      * **User**: User full name.
      * **Username**: User login.
      * **Status**: Current user status:
  
          * `Active`: Active user.
          * `Inactive`: Inactive user.
      * **Credential provider**: Information about the user's identity provider:
  
          * For federated users: [Identity federation](../concepts/add-federation.md) name.
          * For local users: [User pool](../concepts/user-pools.md) name.
          * For users with a Yandex account: `Yandex ID`.
      * **Last authentication**: Date and time of the user's last [authentication](../../iam/concepts/authorization/index.md) in Yandex Cloud. There may be no date if no authentication has yet taken place or if it happened before this feature was introduced.
  
          * For federated and local users, the date is displayed in the list and in the user card.
          * For users with a Yandex account, the date is displayed only in the card and only when viewed under the same user's name.
  
      * **ID**: User ID.
      * **Email**: User email address.
      * **Company name**: Name of the company the user works for.
      * **Department**: User’s division or department.
      * **Position**: User’s job title.
      * **Employee ID**: User’s digital code from the corporate HR system.
  
      {% note info %}
  
      Some fields may not be displayed. To set up field display, click ![gear](../../_assets/console-icons/gear.svg) in the top-right corner of the user list, select the fields, and click **Apply**.
  
      You can also re-order the fields by dragging them with your mouse.
  
      {% endnote %}
   
  1. Locate the user in the list. Use the filter or search bar at the top of the screen as needed.
  1. Click the row with the name for details about the user and the user's [groups](../concepts/groups.md), [MFA factors](../concepts/mfa.md#mfa-factors) (for federated and local users), [OS Login profiles](../concepts/os-login.md#os-login-profiles), and [SSH keys](../concepts/os-login.md#ssh-keys).

- CLI {#cli}

  If you do not have the Yandex Cloud CLI yet, [install and initialize it](../../cli/quickstart.md#install).

  The folder used by default is the one specified when [creating](../../cli/operations/profile/profile-create.md) the CLI profile. To change the default folder, use the `yc config set folder-id <folder_ID>` command. You can also specify a different folder for any command using `--folder-name` or `--folder-id`. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.

  1. See the description of the CLI command for getting [pool](../concepts/user-pools.md) user info:

     ```bash
     yc organization-manager idp user get --help
     ```
  1. To get a list of pools in an organization, provide its [ID](organization-get-id.md) in this command:
     
     ```bash
     yc organization-manager idp userpool list \
       --organization-id <organization_ID>
     ```
     
     Result:
     
     ```text
     +----------------------+--------------+-------------+----------------------+---------------------+
     |          ID          |     NAME     | DESCRIPTION |   ORGANIZATION ID    |     CREATED AT      |
     +----------------------+--------------+-------------+----------------------+---------------------+
     | ek0o6g0irskn******** | sample-pool1 |             | bpf2c65rqcl8******** | 2025-05-17 10:01:04 |
     | ek03mf01jr4z******** | sample-pool2 |             | bpf2c65rqcl8******** | 2025-06-28 16:30:23 |
     +----------------------+--------------+-------------+----------------------+---------------------+
     ```
  1. To get the IDs and other information about pool users, provide the pool ID in the following command:
     
     ```bash
     yc organization-manager idp user list \
       --userpool-id <user_pool_ID>
     ```
     
     Result:
     
     ```text
     +----------------------+----------------------------------------+-----------+----------------------+-----------+---------------------+
     |          ID          |                USERNAME                | FULL NAME |     USERPOOL ID      | IS ACTIVE |     CREATED AT      |
     +----------------------+----------------------------------------+-----------+----------------------+-----------+---------------------+
     | aje3i1gq49n3******** | test-user1@test.ru.idp.yandexcloud.net | User 1    | ek0o6g0irskn******** | true      | 2025-10-07 10:41:54 |
     | aje0j5mts02t******** | test-user2@test.ru.idp.yandexcloud.net | User 2    | ek0o6g0irskn******** | false     | 2025-07-16 11:18:57 |
     +----------------------+----------------------------------------+-----------+----------------------+-----------+---------------------+
     ```
  1. To get information about a specific user, run the command below and specify the user ID:

      ```bash
      yc organization-manager idp user get <user_ID>
      ```

      Result:

      ```text
      id: aje0j5mts02t********
      userpool_id: ek0o6g0irskn********
      status: SUSPENDED
      username: test-user2@test.ru.idp.yandexcloud.net
      full_name: User 2
      given_name: Mad
      family_name: Hatter
      email: testuser@test.com
      phone_number: "+74991234567"
      created_at: "2025-07-16T11:18:57.679246Z"
      updated_at: "2025-10-13T08:14:23.764152Z"
      ```

- API {#api}

  To get information about organization users, use the [get](../idp/api-ref/User/get.md) REST API method for the [User](../idp/api-ref/User/index.md) resource or the [UserService/Get](../idp/api-ref/grpc/User/get.md) gRPC API call.

{% endlist %}