List flattened accounts for a computer
GET/computers/:computerId/flattened-accounts
Returns the directory accounts that have administrator rights on the computer, both directly and through nested group membership.
Direct entries have isDirect: true. Service accounts are excluded. The response is not paged.
Required role: superadmin or admin.
Request
Responses
- 200
- 401
- 403
- 404
- 422
- 500
Matching accounts.
No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.
The token's role is not allowed for this operation, or the token's scopes exclude the route
(Scope not allowed by token).
No record has the :id in the path (the id is malformed or unknown). The body is the bare text Invalid <Type> ID (for example Invalid Computer ID, Invalid User ID) with Content-Type text/html; charset=utf-8, not JSON. Some routes return an empty body.
An accountTypes value is not computer, group or user, or memberDn is not an array.
The server returns 500 when the sAMAccountName value cannot be processed as a filter. Body is the generic {error} shape. Send a plain account-name prefix to avoid it.