> ## Documentation Index
> Fetch the complete documentation index at: https://docs.livingsecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get person membership details

> Retrieve membership information for a specific person. Organization context provided via x-organization-id header.



## OpenAPI

````yaml /api-reference/openapi-public.json get /people/{personId}/membership
openapi: 3.0.0
info:
  title: Living Security Public API
  description: >-
    Curated, versioned API for Living Security customer integrations.
    Authenticate by exchanging a Living Security API access key for a
    short-lived bearer access token.
  version: 1.0.0
  contact: {}
servers:
  - url: https://api.us-east-1.livingsecurity.ai/api/v1
    description: US production
  - url: https://api.eu-west-1.livingsecurity.ai/api/v1
    description: EU production
  - url: /api/v1
    description: Current origin
security: []
tags: []
paths:
  /people/{personId}/membership:
    get:
      tags:
        - People
      summary: Get person membership details
      description: >-
        Retrieve membership information for a specific person. Organization
        context provided via x-organization-id header.
      operationId: Memberships.getPersonMembership
      parameters:
        - name: x-organization-id
          in: header
          description: Organization context for multi-tenant operations
          required: true
          schema:
            type: string
            format: uuid
        - name: personId
          required: true
          in: path
          schema:
            type: string
      responses:
        '200':
          description: Membership details found successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MembershipResponseDto'
        '404':
          description: Person not found in organization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotFoundErrorDto'
      security:
        - bearerAuth: []
components:
  schemas:
    MembershipResponseDto:
      type: object
      properties:
        id:
          type: string
          description: Unique membership identifier
          example: 550e8400-e29b-41d4-a716-446655440000
        personId:
          type: string
          description: Person ID associated with this membership
          example: user-550e8400-e29b-41d4-a716-446655440000
        organizationId:
          type: string
          description: Organization ID for this membership
          example: 550e8400-e29b-41d4-a716-446655440000
        active:
          type: boolean
          description: Whether the membership is currently active
          example: true
        profile:
          description: Person profile data (name, email, etc.)
          allOf:
            - $ref: '#/components/schemas/ProfileDto'
        createdAt:
          format: date-time
          type: string
          description: Membership creation timestamp
          example: '2025-10-01T00:00:00.000Z'
        updatedAt:
          format: date-time
          type: string
          description: Membership last update timestamp
          example: '2025-10-01T12:00:00.000Z'
        importSource:
          type: string
          description: How the user was provisioned (SCIM, CSV, or MANUAL)
          enum:
            - SCIM
            - CSV
            - MANUAL
          example: SCIM
          nullable: true
        accessGrantType:
          type: string
          description: How access was granted (DIRECT, PARENT_ORG, or PLATFORM)
          enum:
            - DIRECT
            - PARENT_ORG
            - PLATFORM
          example: DIRECT
          nullable: true
        stickyAttributes:
          description: Sticky attributes (overrides, local attributes, sync status)
          allOf:
            - $ref: '#/components/schemas/StickyAttributesResponseDto'
        role:
          type: string
          description: >-
            Primary role identifier. Can be a system role type (OWNER, ADMIN,
            MEMBER), catalog role ID, or custom role ID based on precedence
            (system > catalog > custom)
          example: OWNER
          nullable: true
        roleDisplayName:
          type: string
          description: Human-friendly role display name
          example: Owner
          nullable: true
        roleIds:
          description: >-
            Array of ALL role identifiers assigned to this member. Includes
            system role types (OWNER, ADMIN, etc.), catalog role IDs, and custom
            role IDs.
          example:
            - MANAGER
            - role-123
          nullable: true
          type: array
          items:
            type: string
      required:
        - id
        - personId
        - organizationId
        - active
        - profile
        - createdAt
        - updatedAt
    NotFoundErrorDto:
      type: object
      properties:
        statusCode:
          type: number
          description: HTTP status code
          example: 404
        message:
          description: Error message or array of validation errors
          oneOf:
            - type: string
              example: Invalid input
            - type: array
              items:
                type: string
              example:
                - email must be an email
                - name should not be empty
          example: Resource not found
        error:
          type: string
          description: Error type identifier
          example: Not Found
      required:
        - statusCode
        - message
        - error
    ProfileDto:
      type: object
      properties:
        name:
          type: string
          description: Person's full name
          example: John Doe
        email:
          type: string
          description: Person's email address
          example: john.doe@example.com
        firstName:
          type: string
          description: First name (given name)
          example: John
          nullable: true
        lastName:
          type: string
          description: Last name (family name)
          example: Doe
          nullable: true
        middleName:
          type: string
          description: Middle name
          example: Michael
          nullable: true
        phone:
          type: string
          description: Primary phone number
          example: '+12025551234'
          nullable: true
        mobilePhone:
          type: string
          description: Mobile phone number
          example: '+12025555678'
          nullable: true
        workAddress:
          description: Work address
          nullable: true
          allOf:
            - $ref: '#/components/schemas/AddressDto'
        jobTitle:
          type: string
          description: Job title
          example: Senior Software Engineer
          nullable: true
        department:
          type: string
          description: Department
          example: Engineering
          nullable: true
        division:
          type: string
          description: Division or business unit
          example: Product Development
          nullable: true
        costCenter:
          type: string
          description: Cost center code
          example: CC-1234
          nullable: true
        employeeNumber:
          type: string
          description: Employee number
          example: E12345
          nullable: true
        userType:
          type: string
          description: User type (e.g., Employee, Contractor)
          example: Employee
          nullable: true
        manager:
          description: Manager reference
          nullable: true
          allOf:
            - $ref: '#/components/schemas/PersonReferenceDto'
        locale:
          type: string
          description: Locale preference (e.g., en-US)
          example: en-US
          nullable: true
        timezone:
          type: string
          description: Timezone (e.g., America/New_York)
          example: America/New_York
          nullable: true
        preferredLanguage:
          type: string
          description: Preferred language code
          example: en
          nullable: true
        customAttributes:
          type: object
          description: >-
            Custom SCIM attributes from identity provider (vendor-specific
            extensions)
          additionalProperties: true
          example:
            urn:okta:custom:1.0:user:slackId: U123456
            extension_azure_TeamsId: T789012
          nullable: true
        metadata:
          type: object
          description: Additional user metadata from identity provider (legacy field)
          example:
            department: Engineering
            title: Senior Developer
          nullable: true
      required:
        - name
        - email
    StickyAttributesResponseDto:
      type: object
      properties:
        sourceType:
          type: string
          description: Identity source type
          enum:
            - SCIM
            - MANUAL
          example: SCIM
        manualOverrides:
          type: object
          description: Manual overrides - admin corrections to SCIM fields
          example:
            department: Engineering
            title: Senior Developer
        overrideMetadata:
          type: object
          description: Override metadata - audit info for each override
          additionalProperties:
            type: object
        localAttributes:
          type: object
          description: Local attributes - org-specific fields not in IdP
          example:
            riskScore: medium
            tags:
              - contractor
        scimSyncExcluded:
          type: boolean
          description: Whether user is excluded from SCIM sync
          example: false
        overriddenFields:
          description: List of currently overridden field names
          example:
            - department
            - title
          type: array
          items:
            type: string
        displayAttributes:
          type: object
          description: Computed display attributes (merged SCIM + overrides + local)
          additionalProperties: true
      required:
        - sourceType
        - manualOverrides
        - overrideMetadata
        - localAttributes
        - scimSyncExcluded
        - overriddenFields
        - displayAttributes
    AddressDto:
      type: object
      properties:
        type:
          type: string
          description: Address type
          enum:
            - work
            - home
            - other
          example: work
        streetAddress:
          type: string
          description: Street address
          example: 100 Universal City Plaza
          nullable: true
        locality:
          type: string
          description: City or locality
          example: Hollywood
          nullable: true
        region:
          type: string
          description: State or region
          example: CA
          nullable: true
        postalCode:
          type: string
          description: Postal code
          example: '91608'
          nullable: true
        country:
          type: string
          description: Country
          example: USA
          nullable: true
        primary:
          type: boolean
          description: Whether this is the primary address
          example: true
          nullable: true
      required:
        - type
    PersonReferenceDto:
      type: object
      properties:
        id:
          type: string
          description: Person ID
          example: 01914b4a-6fd7-7c5e-b343-6a7105f9e632
        name:
          type: string
          description: Person display name
          example: Jane Smith
        email:
          type: string
          description: Person email address
          example: jane.smith@example.com
          nullable: true
      required:
        - id
        - name
  securitySchemes:
    bearerAuth:
      scheme: bearer
      bearerFormat: access-token
      type: http
      description: >-
        Short-lived bearer access token issued for a Living Security API access
        key. Send as Authorization: Bearer <token>.

````