Beta. Returns the full account population for your organization — identity plus account status — for consumption by an external identity-governance system (e.g. SailPoint). One row per account, scoped to your organization by the API key.

For SCIM-integrated customers. The status field is only authoritative when your organization deprovisions through SCIM (directory sync). See the fidelity note below.

Includes deactivated accounts. Unlike the engagement reports under /v1/reports/*, a roster deliberately includes deactivated accounts and exposes their status — that is the point of an account roster.

Two-call model. This endpoint returns accounts and status only, not training completion. To combine the two, pull accounts here and completions from /v1/reports/coach (or /v1/reports/employee-superpower-map), then correlate on external_employee_id. This mirrors the SailPoint accounts-then-entitlements aggregation pattern.

Identifiers. section_user_id is the stable native account id (durable across a deprovision and later reprovision of the same person) — key your accounts on it. external_employee_id is your own directory identifier, for correlating each account back to your HR/AD identity; it is null when your IdP does not send it.

status fidelity. status is derived from an internal deactivation timestamp. It moves to deactivated when a disable, lock, or deletion for the account reaches Section — reliably only over SCIM. Deprovisions performed solely in your directory (e.g. an AD-only termination that is not synced to Section) are not reflected. For a customer not integrated over SCIM, status will read active for essentially every account and must not be treated as an offboarding signal. An account that was provisioned but has never signed in may not appear at all until first sign-in.