Account members

The account members API allows you to invite new members to an account by making a POST request to /api/v2/members. When you invite a new member to an account, an invitation is sent to the email you provided. Members with "admin" or "owner" roles may create new members, as well as anyone with a "createMember" permission for "member/*". To learn more, read LaunchDarkly account members.

Any member may request the complete list of account members with a GET to /api/v2/members.

Valid built-in role names that you can provide for the role field include reader, writer, admin, owner/admin, and no_access. To learn more about built-in roles, read LaunchDarkly's built-in roles.

Several of the endpoints in the account members API require a member ID. The member ID is returned as part of the Invite new members and List account members responses. It is the _id field of each element in the items array.

List account members

Return a list of account members.

By default, this returns the first 20 members. Page through this list with the limit parameter and by following the first, prev, next, and last links in the returned _links field. These links are not present if the pages they refer to don't exist. For example, the first and prev links will be missing from the response on the first page.

Filtering members

LaunchDarkly supports the following fields for filters:

  • query is a string that matches against the members' emails and names. It is not case sensitive.
  • role is a | separated list of roles and custom roles. It filters the list to members who have any of the roles in the list. For the purposes of this filtering, Owner counts as Admin.
  • id is a | separated list of member IDs. It filters the list to members who match any of the IDs in the list.
  • email is a | separated list of member emails. It filters the list to members who match any of the emails in the list.
  • team is a string that matches against the key of the teams the members belong to. It is not case sensitive.
  • noteam is a boolean that filters the list of members who are not on a team if true and members on a team if false.
  • lastSeen is a JSON object in one of the following formats:
    • {"never": true} - Members that have never been active, such as those who have not accepted their invitation to LaunchDarkly, or have not logged in after being provisioned via SCIM.
    • {"noData": true} - Members that have not been active since LaunchDarkly began recording last seen timestamps.
    • {"before": 1608672063611} - Members that have not been active since the provided value, which should be a timestamp in Unix epoch milliseconds.
  • accessCheck is a string that represents a specific action on a specific resource and is in the format <ActionSpecifier>:<ResourceSpecifier>. It filters the list to members who have the ability to perform that action on that resource. Note: accessCheck is only supported in API version 20220603 and earlier. To learn more, read Versioning.
    • For example, the filter accessCheck:createApprovalRequest:proj/default:env/test:flag/alternate-page matches members with the ability to create an approval request for the alternate-page flag in the test environment of the default project.
    • Wildcard and tag filters are not supported when filtering for access.

For example, the filter query:abc,role:admin|customrole matches members with the string abc in their email or name, ignoring case, who also are either an Owner or Admin or have the custom role customrole.

Sorting members

LaunchDarkly supports two fields for sorting: displayName and lastSeen:

  • displayName sorts by first + last name, using the member's email if no name is set.
  • lastSeen sorts by the _lastSeen property. LaunchDarkly considers members that have never been seen or have no data the oldest.
Request
query Parameters
limit
integer <int64>

The number of members to return in the response. Defaults to 20.

offset
integer <int64>

Where to start in the list. This is for use with pagination. For example, an offset of 10 skips the first ten items and then returns the next items in the list, up to the query limit.

filter
string <string>

A comma-separated list of filters. Each filter is of the form field:value. Supported fields are explained above.

expand
string <string>

A comma-separated list of properties that can reveal additional information in the response.

sort
string <string>

A comma-separated list of fields to sort by. Fields prefixed by a dash ( - ) sort in descending order.

Responses
200

Members collection response

401

Invalid access token

403

Forbidden

404

Invalid resource identifier

429

Rate limited

get/api/v2/members
Request samples
Response samples
application/json
{
  • "items": [
    ],
  • "_links": {
    },
  • "totalCount": 0
}

Invite new members

Invite one or more new members to join an account. Each member is sent an invitation. Members with "admin" or "owner" roles may create new members, as well as anyone with a "createMember" permission for "member/*". If a member cannot be invited, the entire request is rejected and no members are invited from that request.

Each member must have an email field and either a role or a customRoles field. If any of the fields are not populated correctly, the request is rejected with the reason specified in the "message" field of the response.

Requests to create account members will not work if SCIM is enabled for the account.

No more than 50 members may be created per request.

A request may also fail because of conflicts with existing members. These conflicts are reported using the additional code and invalid_emails response fields with the following possible values for code:

  • email_already_exists_in_account: A member with this email address already exists in this account.
  • email_taken_in_different_account: A member with this email address exists in another account.
  • duplicate_emails: This request contains two or more members with the same email address.

A request that fails for one of the above reasons returns an HTTP response code of 400 (Bad Request).

Request
Request Body schema: application/json
required
Array
email
required
string

The member's email

password
string

The member's password

firstName
string

The member's first name

lastName
string

The member's last name

role
string

The member's built-in role

Enum: "reader" "writer" "admin" "no_access"
customRoles
Array of strings

An array of the member's custom roles

teamKeys
Array of strings

An array of the member's teams

object (RoleAttributeMap)
Responses
201

Member collection response

400

Invalid request

401

Invalid access token

403

Forbidden

409

Status conflict

429

Rate limited

post/api/v2/members
Request samples
application/json
[
  • {
    }
]
Response samples
application/json
{
  • "items": [
    ],
  • "_links": {
    },
  • "totalCount": 0
}

Get account member

Get a single account member by member ID.

me is a reserved value for the id parameter that returns the caller's member information.

Request
path Parameters
id
required
string <string>

The member ID

query Parameters
expand
string <string>

A comma-separated list of properties that can reveal additional information in the response.

Responses
200

Member response

401

Invalid access token

403

Forbidden

404

Invalid resource identifier

429

Rate limited

get/api/v2/members/{id}
Request samples
Response samples
application/json
{
  • "_links": {
    },
  • "_id": "507f1f77bcf86cd799439011",
  • "firstName": "Ariel",
  • "lastName": "Flores",
  • "role": "reader",
  • "email": "ariel@acme.com",
  • "_pendingInvite": false,
  • "_verified": true,
  • "_pendingEmail": "string",
  • "customRoles": [
    ],
  • "mfa": "string",
  • "excludedDashboards": [
    ],
  • "_lastSeen": 0,
  • "_lastSeenMetadata": {
    },
  • "_integrationMetadata": {
    },
  • "teams": [
    ],
  • "permissionGrants": [
    ],
  • "creationDate": 0,
  • "oauthProviders": [
    ],
  • "version": 1,
  • "roleAttributes": {
    }
}

Modify an account member

Update a single account member. Updating a member uses a JSON patch representation of the desired changes. To learn more, read Updates.

To update fields in the account member object that are arrays, set the path to the name of the field and then append /<array index>. Use /0 to add to the beginning of the array. Use /- to add to the end of the array. For example, to add a new custom role to a member, use the following request body:

  [
    {
      "op": "add",
      "path": "/customRoles/0",
      "value": "some-role-id"
    }
  ]

You can update only an account member's role or custom role using a JSON patch. Members can update their own names and email addresses though the LaunchDarkly UI.

When SAML SSO or SCIM is enabled for the account, account members are managed in the Identity Provider (IdP). Requests to update account members will succeed, but the IdP will override the update shortly afterwards.

Request
path Parameters
id
required
string <string>

The member ID

Request Body schema: application/json
required
Array
op
required
string

The type of operation to perform

path
required
string

A JSON Pointer string specifying the part of the document to operate on

value
any

A JSON value used in "add", "replace", and "test" operations

Responses
200

Member response

400

Invalid request

401

Invalid access token

403

Forbidden

404

Invalid resource identifier

409

Status conflict

429

Rate limited

patch/api/v2/members/{id}
Request samples
application/json
[
  • {
    }
]
Response samples
application/json
{
  • "_links": {
    },
  • "_id": "507f1f77bcf86cd799439011",
  • "firstName": "Ariel",
  • "lastName": "Flores",
  • "role": "reader",
  • "email": "ariel@acme.com",
  • "_pendingInvite": false,
  • "_verified": true,
  • "_pendingEmail": "string",
  • "customRoles": [
    ],
  • "mfa": "string",
  • "excludedDashboards": [
    ],
  • "_lastSeen": 0,
  • "_lastSeenMetadata": {
    },
  • "_integrationMetadata": {
    },
  • "teams": [
    ],
  • "permissionGrants": [
    ],
  • "creationDate": 0,
  • "oauthProviders": [
    ],
  • "version": 1,
  • "roleAttributes": {
    }
}

Delete account member

Delete a single account member by ID. Requests to delete account members will not work if SCIM is enabled for the account.

Request
path Parameters
id
required
string <string>

The member ID

Responses
204

Action succeeded

401

Invalid access token

403

Forbidden

404

Invalid resource identifier

409

Status conflict

429

Rate limited

delete/api/v2/members/{id}
Request samples
Response samples
application/json
{
  • "code": "unauthorized",
  • "message": "Invalid access token"
}

Add a member to teams

Add one member to one or more teams.

Request
path Parameters
id
required
string <string>

The member ID

Request Body schema: application/json
required
teamKeys
required
Array of strings

List of team keys

Responses
201

Member response

400

Invalid request

401

Invalid access token

403

Forbidden

404

Member not found

409

Status conflict

429

Rate limited

post/api/v2/members/{id}/teams
Request samples
application/json
{
  • "teamKeys": [
    ]
}
Response samples
application/json
{
  • "_links": {
    },
  • "_id": "507f1f77bcf86cd799439011",
  • "firstName": "Ariel",
  • "lastName": "Flores",
  • "role": "reader",
  • "email": "ariel@acme.com",
  • "_pendingInvite": false,
  • "_verified": true,
  • "_pendingEmail": "string",
  • "customRoles": [
    ],
  • "mfa": "string",
  • "excludedDashboards": [
    ],
  • "_lastSeen": 0,
  • "_lastSeenMetadata": {
    },
  • "_integrationMetadata": {
    },
  • "teams": [
    ],
  • "permissionGrants": [
    ],
  • "creationDate": 0,
  • "oauthProviders": [
    ],
  • "version": 1,
  • "roleAttributes": {
    }
}