> ## Documentation Index
> Fetch the complete documentation index at: https://docs.niadra.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Who am I

> The signed-in person, their roles and the spaces they reach.



## OpenAPI

````yaml openapi/en/control.json GET /v1/users/me
openapi: 3.1.0
info:
  title: Niadra control API
  version: '1'
  description: >-
    Tenants, projects, sources, keys, people, configuration and usage. It never
    receives customer content.
servers:
  - url: https://control.api.niadra.com
security: []
paths:
  /v1/users/me:
    get:
      summary: Who am I
      description: >-
        The signed-in person: tenant, e-mail and every space they can open, with
        the roles they hold in each. The Console builds its menus from this
        answer.


        **Authentication.** Person token issued by the control plane
        (`Authorization: Bearer <JWT>`), with the role the operation needs.
      operationId: me_v1_users_me_get
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MeOut'
              example:
                user_id: 0192f0a0-4e5f-7061-9c72-8d9e0f1a2b34
                tenant_id: 0192f0a0-1b2c-7d3e-8f40-5a6b7c8d9e01
                email: ana@acme.example
                name: null
                spaces:
                  - space_id: 0192f0a0-3d4e-7f50-8b61-7c8d9e0f1a23
                    project_id: 0192f0a0-2c3d-7e4f-9a50-6b7c8d9e0f12
                    environment: production
                    slug: acme-prod
                    region: us-east-1
                    roles:
                      - admin
                  - space_id: 0192f0a0-3d4e-7f50-8b61-7c8d9e0f1a24
                    project_id: 0192f0a0-2c3d-7e4f-9a50-6b7c8d9e0f12
                    environment: sandbox
                    slug: acme-sandbox
                    region: us-east-1
                    roles:
                      - admin
          description: The person and their spaces.
      security:
        - personToken: []
components:
  schemas:
    MeOut:
      additionalProperties: false
      properties:
        email:
          title: Email
          type: string
        name:
          anyOf:
            - type: string
            - type: 'null'
          description: Not collected yet; reserved for SSO profiles.
          title: Name
        spaces:
          description: Every space the person can open, with the roles held there.
          items:
            $ref: '#/components/schemas/SpaceRoles'
          title: Spaces
          type: array
        tenant_id:
          format: uuid
          title: Tenant Id
          type: string
        user_id:
          format: uuid
          title: User Id
          type: string
      required:
        - user_id
        - tenant_id
        - email
        - spaces
      title: MeOut
      type: object
    SpaceRoles:
      additionalProperties: false
      properties:
        environment:
          $ref: '#/components/schemas/Environment'
        project_id:
          format: uuid
          title: Project Id
          type: string
        region:
          title: Region
          type: string
        roles:
          items:
            $ref: '#/components/schemas/Role'
          title: Roles
          type: array
        slug:
          title: Slug
          type: string
        space_id:
          format: uuid
          title: Space Id
          type: string
      required:
        - space_id
        - project_id
        - environment
        - slug
        - region
        - roles
      title: SpaceRoles
      type: object
    Environment:
      enum:
        - sandbox
        - production
      title: Environment
      type: string
    Role:
      description: Console roles, combinable.
      enum:
        - admin
        - security
        - integration
        - review
        - analysis
        - vendor
      title: Role
      type: string
  securitySchemes:
    personToken:
      type: http
      scheme: bearer
      bearerFormat: JWT

````