Data dictionary — Users
A user in DonorIntel represents a person who can authenticate via WorkOS and participate in one or more tenants according to membership and roles. This dictionary entry clarifies which attributes belong to global identity (email, SSO subject) versus per-tenant state (role assignments, suspension flags).
Integrators syncing HR systems should pay attention to identity keys vs display names.
Overview
Section titled “Overview”Users carry authentication identifiers that must remain stable across email changes where your IdP supports aliases; display names may update freely for UI polish. Tenant membership is modeled separately so the same individual can be invited to distinct orgs without colliding permissions.
Status fields indicate active, invited, or deactivated lifecycles; always pair API reads with activity logs for forensic completeness. Field-level JSON schemas will be inlined here as they stabilize for public API consumers.