Enterprise API

Enterprise endpoints use a user JWT (pb_usr_*) from /v1/auth/login. Organization and member management require an Enterprise owner.

Profile

• GET /v1/enterprise returns the current Enterprise profile.
• PATCH /v1/enterprise updates name, billing_email, or plan; owner only.

Organizations

• GET /v1/enterprise/orgs lists organizations in the current Enterprise.
• POST /v1/enterprise/orgs creates an organization with optional id and name.
• DELETE /v1/enterprise/orgs/{id} deletes an organization when it is not the current organization and has no users.

Members

• GET /v1/enterprise/members lists Enterprise users, including disabled members.
• PATCH /v1/enterprise/members/{id} updates enterprise_role and/or organization_id; owner only.
• DELETE /v1/enterprise/members/{id} disables the user account; owner only.

Roles are owner, admin, or member. The API blocks self-disable and prevents disabling or downgrading the last active owner.

Disabled users cannot log in, and existing user JWTs are rejected once the account status is disabled.

Invitations

• POST /v1/enterprise/invitations creates an invitation for email, organization_id, role, and expires_hours.
• POST /v1/enterprise/invitations/{token}/accept creates an active Enterprise user from a valid invitation.

Admins may invite users only into their own organization and cannot invite owners.

Usage

• GET /v1/enterprise/usage returns aggregate organization, computer, printer, and job counts across the Enterprise.