Viewer

The currently authenticated session context. Provides the logged-in user,
their account, 2FA status, and the aggregated permissions granted to them.

Fields

Fields on the Viewer object.

Field	Type	Description
`user`	`User!`	—
`account`	`Account!`	—
`isTwoFactorValidated`	`Boolean!`	Whether the user has completed two-factor authentication for this session.
`grantedPermissionsWithScope`	`[PermissionWithScope!]!`	All permissions granted to the viewer, each with its effective scope.
`grantableRoles`	`[Role!]!`	Roles the viewer is allowed to grant to other users, based on the viewer's own permissions.

Root queries that return or operate on this object.

Returns the currently authenticated user's session context, including permissions and 2FA status.

type Query {
  viewer: Viewer!
}

No arguments.

Root mutations that create, update, or otherwise change this object.

Switches the current session to act as a different user. Admin only. Audit-logged.

type Mutation {
  switchUser(input: SwitchUserInput!): SwitchUserPayload!
}

Argument	Type	Description
`input`	`SwitchUserInput!`	—

Supporting objects, inputs, and enums used by this page.

Type: object

A permission name paired with its effective scope for the current viewer.

Field	Type	Description
`permissionName`	`String!`	—
`scope`	`RoleScope!`	—

Type: object

Response payload for the switchUser mutation.

Field	Type	Description
`token`	`String!`	New JWT session token for the switched user context.

Type: input

Input for switching to a different user's context.

Field	Type	Description
`userID`	`String!`	—