Skip to main content

ADMINPANEL API Reference

Module Information​

Service Files:

  • Private: service/private/adminpanel.js

Available Services: 44 Documented Services: 43


adminpanel.organisation_add​

Create a new organisation for the current domain owner. Requires an active subscription, no existing organisation, and an available ident. Creates the domain, grants owner privilege, and persists the organisation record.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.organisation_add

Parameters​

ParameterTypeRequiredDefaultDescription
namestringYes-Display name of the new organisation
identstringYes-Unique identifier for the organisation (lowercased). Must not already be registered as an ident in the system.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
INVALID_SUBSCRIPTION403Current user has no active subscription
ORGANISATION_ALREADY_EXITS409Current user already belongs to an organisation
IDENT_NOT_AVAILABLE409Requested ident is already registered in the system

adminpanel.organisation_update​

Update the display name of the current user's organisation. Requires admin-level privilege within the domain.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.organisation_update

Parameters​

ParameterTypeRequiredDefaultDescription
namestringYes-New display name for the organisation

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NO_ORG_TO_UPDATE404Current user is not a member of any organisation
INVALID_ORG403Current user's organisation does not match the domain organisation
NOT_ENOUGH_PRIVILEGE403Caller does not have the required admin privilege level

adminpanel.organisation_update_password_level​

Update the password strength policy level for the organisation. Requires security admin privilege.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.organisation_update_password_level

Parameters​

ParameterTypeRequiredDefaultDescription
optionstringYes-Password policy level option to apply (accepted by organisation_update_password_level procedure)

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NO_ORG_TO_UPDATE404Current user is not a member of any organisation
INVALID_ORG403Organisation mismatch between caller and domain
NOT_ENOUGH_PRIVILEGE403Caller does not have security admin privilege

adminpanel.organisation_update_double_auth​

Update the two-factor authentication policy for the organisation. Requires security admin privilege.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.organisation_update_double_auth

Parameters​

ParameterTypeRequiredDefaultDescription
optionstringYes-Double auth policy option to apply (accepted by organisation_update_double_auth procedure)

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NO_ORG_TO_UPDATE404Current user is not a member of any organisation
INVALID_ORG403Organisation mismatch between caller and domain
NOT_ENOUGH_PRIVILEGE403Caller does not have security admin privilege

adminpanel.organisation_update_dir_visiblity​

Update the directory visibility policy for the organisation (controls whether member profiles are discoverable). Requires security admin privilege. Note: method name preserves intentional legacy spelling.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.organisation_update_dir_visiblity

Parameters​

ParameterTypeRequiredDefaultDescription
optionstringYes-Visibility policy option accepted by organisation_update_dir_visiblity procedure

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NO_ORG_TO_UPDATE404Current user is not a member of any organisation
INVALID_ORG403Organisation mismatch between caller and domain
NOT_ENOUGH_PRIVILEGE403Caller does not have security admin privilege

adminpanel.organisation_update_dir_info​

Update the directory information policy for the organisation (controls which member fields are visible in directory listings). Requires security admin privilege.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.organisation_update_dir_info

Parameters​

ParameterTypeRequiredDefaultDescription
optionstringYes-Directory info policy option accepted by organisation_update_dir_info procedure

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NO_ORG_TO_UPDATE404Current user is not a member of any organisation
INVALID_ORG403Organisation mismatch between caller and domain
NOT_ENOUGH_PRIVILEGE403Caller does not have security admin privilege

adminpanel.my_subscription​

Retrieve the current user's active subscription record.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.my_subscription

Parameters​

No parameters

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error codes not documented


adminpanel.my_organisation​

Retrieve the organisation that the current user belongs to.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.my_organisation

Parameters​

No parameters

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error codes not documented


adminpanel.my_privilege​

Retrieve the current user's privilege level within the domain. Returns dom_owner if the user has an active subscription, otherwise returns the privilege level from their organisation membership.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.my_privilege

Parameters​

No parameters

Returns​

FieldTypeDescription
typeany-
docany-
propertiesany-

Possible Errors​

Error codes not documented


adminpanel.setPassword​

Forcibly set a user's password by their ID. Admin operation that does not require the current password. Note: method name uses legacy camelCase.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.setPassword

Parameters​

ParameterTypeRequiredDefaultDescription
idstringYes-ID of the user whose password to set
passwordstringYes-New plain-text password to assign

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
INVALID_DATA400id or password parameter is missing

adminpanel.set_mfa​

Enable or disable multi-factor authentication for a specific member. Updates the user's otp and mfa profile fields and sends a notification email to the affected user.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.set_mfa

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to update MFA settings for
mfanumberNo-MFA mode to set. 0 to disable, non-zero to enable. Defaults to 0.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
INVALID_DATA400user_id is required
INVALID_USER404No user found for the given user_id

adminpanel.role_add​

Add a new role to the current domain's organisation. Requires member-admin privilege level.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.role_add

Parameters​

ParameterTypeRequiredDefaultDescription
namestringYes-Display name for the new role

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NOT_ENOUGH_PRIVILEGE403Caller does not have member-admin privilege level

adminpanel.role_show​

List all roles defined for the current domain's organisation, paginated. Requires at least admin-view privilege.

PropertyValue
ScopeDomain (requires authentication)
PermissionRead (2)

Endpoint:

https://hostname/-/svc/adminpanel.role_show

Parameters​

ParameterTypeRequiredDefaultDescription
pagenumberNo-Page number for pagination (default: 1)

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NOT_ENOUGH_PRIVILEGE403Caller does not have admin-view privilege level

adminpanel.role_delete​

Delete a role from the current domain's organisation by role ID. Requires member-admin privilege. The role must exist.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.role_delete

Parameters​

ParameterTypeRequiredDefaultDescription
role_idstringYes-ID of the role to delete

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NOT_ENOUGH_PRIVILEGE403Caller does not have member-admin privilege level
ROLE_NOT_EXISTS404No role found with the given role_id in the organisation

adminpanel.role_assign​

Assign one or more roles to a member within the current domain's organisation. Validates that all provided role IDs exist before assigning.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.role_assign

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to assign roles to
rolearrayNo-Array of role IDs to assign. Mutually usable with list parameter.
listarrayNo-Array of role IDs to assign. Mutually usable with role parameter.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
ROLE_NOT_EXISTS404One or more provided role IDs do not exist in the organisation

adminpanel.role_assigned​

Retrieve the list of roles currently assigned to a specific member within the current domain's organisation.

PropertyValue
ScopeDomain (requires authentication)
PermissionRead (2)

Endpoint:

https://hostname/-/svc/adminpanel.role_assigned

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member whose assigned roles to retrieve

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain

adminpanel.role_rename​

Rename an existing role in the current domain's organisation. No-op if the new name is identical to the current name.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.role_rename

Parameters​

ParameterTypeRequiredDefaultDescription
role_idstringYes-ID of the role to rename
namestringYes-New display name for the role

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NOT_ENOUGH_PRIVILEGE403Caller does not have member-admin privilege level
ROLE_NOT_EXISTS404No role found with the given role_id in the organisation

adminpanel.role_reposition​

Reorder roles within the organisation by updating their rank positions.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.role_reposition

Parameters​

ParameterTypeRequiredDefaultDescription
contentarrayYes-Array of role positioning records passed as-is to role_reposition procedure. Each item should include the role ID and its new position index.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error codes not documented


adminpanel.member_add​

Create and register a new member in the domain's organisation. Creates the user account, default storage hubs, default folder structure, sends an invitation email, and sets up contact assignments and ticket permissions. Validates organisation quota before creation.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.member_add

Parameters​

ParameterTypeRequiredDefaultDescription
emailstringYes-Email address for the new member. Must not already be registered in the system.
firstnamestringNo-First name of the new member
lastnamestringNo-Last name of the new member
mobilestringNo-Mobile phone number (optional, used for SMS-based OTP)
areacodestringNo-International dialing area code for the mobile number

Returns​

FieldTypeDescription
typeany-
docany-
propertiesany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found or quota check failed for the current domain
NOT_ENOUGH_PRIVILEGE403Caller does not have member-admin privilege level
EMAIL_NOT_AVAILABLE409The provided email address is already registered in the system
INTERNAL_ERROR500Account creation failed at the database level

adminpanel.member_update​

Update an existing member's profile, role assignments, and OTP settings within the organisation. Validates privilege hierarchy (caller must outrank the target). Sends notification and re-authentication links if contact information changes.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.member_update

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to update
firstnamestringYes-Updated first name
lastnamestringYes-Updated last name
emailstringYes-Updated email address. Must be a valid email format. If changed, must not already be registered.
addressstringNo-Updated physical address
mobilestringNo-Updated mobile phone number
areacodestringNo-Updated international dialing area code
otpnumberNo-OTP mode to set. Accepted values: 0 or 1. Defaults to 0.
rolearrayNo-Array of role IDs to assign. Replaces all current role assignments. Mutually usable with list parameter.
listarrayNo-Array of role IDs to assign. Mutually usable with role parameter.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain or target member
INVALID_ORG403Target member does not belong to the same organisation as the caller
NOT_ENOUGH_PRIVILEGE403Caller does not have sufficient privilege over the target member
INCORRECT_DOMAIN403Target member has no domain privilege record
DRUMATE_NOT_EXISTS404No user found with the given user_id
EMAIL_NOT_AVAILABLE409The new email address is already registered
ROLE_NOT_EXISTS404One or more role IDs in the provided list do not exist
NO_MEMBER404Target user is not a member of the organisation
MOBILE_EMPTY400OTP is enabled but no mobile number was provided
AREACODE_EMPTY400OTP is enabled but no area code was provided
INVALID_EMAIL_FORMAT400Provided email address is not a valid format
INVALID_PHONE_FORMAT400Provided mobile number is not a valid phone number format

adminpanel.member_delete​

Move a member to the Free plan (domain_id=1) instead of deleting them permanently. The member leaves all paid domain hubs; hub ownership is transferred to domain admins where applicable. Sends a removal notification email and broadcasts the change via WebSocket. Caller must have admin privilege and must outrank the target member.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_delete

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to move to the Free plan

Returns​

FieldTypeDescription
typeany-
docany-
propertiesany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404Sanity check failed: user not found, missing db_name, or domain mismatch
NO_MEMBER404Target user is not a member of the organisation
NOT_ENOUGH_PRIVILEGE403Caller's privilege is lower than the target member's privilege
INCORRECT_DOMAIN403Target member has no domain privilege record

adminpanel.member_disconnect​

Permanently remove a member who has never connected (connected=0) from the organisation. Removes them from all hubs, transfers hub ownership to eligible members, and deletes their home directory. This is a destructive, irreversible operation. Caller must have admin privilege and must outrank the target member.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_disconnect

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the never-connected member to permanently remove

Returns​

FieldTypeDescription
typeany-
docany-
propertiesany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain or target member
NO_MEMBER404Target user is not a member of the organisation
INVALID_STATUS409Target member is already connected (connected=1); use member_delete instead
INVALID_ORG403Organisation mismatch between caller and target member
NOT_ENOUGH_PRIVILEGE403Caller does not have sufficient domain admin privilege
INCORRECT_DOMAIN403Target member has no domain privilege record

adminpanel.member_show​

Retrieve the full profile and role assignments for a specific member in the current domain's organisation.

PropertyValue
ScopeDomain (requires authentication)
PermissionRead (2)

Endpoint:

https://hostname/-/svc/adminpanel.member_show

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to retrieve

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain

adminpanel.member_list​

List members of the current domain's organisation with pagination. Supports filtering by role, keyword search, and member type.

PropertyValue
ScopeDomain (requires authentication)
PermissionRead (2)

Endpoint:

https://hostname/-/svc/adminpanel.member_list

Parameters​

ParameterTypeRequiredDefaultDescription
role_idstringNo-Filter members by role ID. Defaults to 0 (all roles).
keystringNo-Keyword to filter members by name or email
pagenumberNo-Page number for pagination (default: 1)
optionstringNo-Member type filter passed to member_list procedure (default: member)

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain

adminpanel.member_change_status​

Change a member's account status within the organisation. Valid transitions: active or archived to locked; locked to active or archived. Caller must have admin privilege and outrank the target member. Archiving a member also clears their contact assignments.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_change_status

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member whose status to change
statusstringYes-Target status. Accepted values: active, locked, archived.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
INVALID_USER400Cannot change the status of the caller's own account
INVALID_STATUS0400Requested status is not one of: active, locked, archived
INVALID_STATUS1409Cannot set to locked from current state (must be active or archived)
INVALID_STATUS2409Cannot set to archived from current state (must be locked)
INVALID_STATUS3409Cannot set to active from current state (must be locked)
NO_ORG404No organisation found for caller or target member
INVALID_ORG403Target member does not belong to the same organisation as the caller
NOT_ENOUGH_PRIVILEGE403Caller does not have sufficient admin privilege over the target
INCORRECT_DOMAIN403Target member has no domain privilege record
NO_MEMBER404Target user is not a member of the organisation

adminpanel.member_loginlog​

Retrieve the paginated login history for a specific member. Validates that the target user belongs to the same domain as the caller.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.member_loginlog

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member whose login log to retrieve
pagenumberNo-Page number for pagination (default: 1)

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404Sanity check failed: user not found, missing db_name, or domain mismatch

adminpanel.member_import​

Bulk import members into the organisation. Implementation is handled internally.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.member_import

adminpanel.member_admin_add​

Grant an elevated admin privilege level to one or more existing members. Requires security admin privilege. Target members must have a registered mobile number for SMS-based OTP. Automatically sets OTP mode to sms for each promoted member.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_admin_add

Parameters​

ParameterTypeRequiredDefaultDescription
usersarrayYes-Array of user IDs to grant admin privilege to. Accepts a single string which is normalised to an array.
privilegenumberYes-Privilege level to grant. Must be between dom_admin_view and dom_admin inclusive.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
INVALID_PRIVILEGE 400Requested privilege level is outside the allowed range (note: trailing space is preserved from source)
NO_ORG404No organisation found for caller or target members
NOT_ENOUGH_PRIVILEGE403Caller does not have security admin privilege
NOT_VALID_DRUMATE404One or more user IDs do not correspond to existing users
NOT_VALID_ORG403One or more users do not belong to this organisation
EMPTY_MOBILE400One or more target users have no mobile number registered

adminpanel.member_admin_list​

List admin-level members of the organisation. Deprecated: code is marked for deletion.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_admin_list

Parameters​

ParameterTypeRequiredDefaultDescription
pagenumberNo-Page number for pagination (default: 1)

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain

adminpanel.member_admin_remove​

Revoke admin privilege from one or more members, downgrading them to regular member (dom_member) level. Requires member-admin privilege.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_admin_remove

Parameters​

ParameterTypeRequiredDefaultDescription
usersarrayYes-Array of user IDs to revoke admin privilege from. Accepts a single string which is normalised to an array.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for caller or target members
NOT_ENOUGH_PRIVILEGE403Caller does not have member-admin privilege level
NOT_VALID_DRUMATE404One or more user IDs do not correspond to existing users
NOT_VALID_ORG403One or more users do not belong to this organisation

adminpanel.member_block​

Set a member's profile blocked flag to yes. Deprecated: code is marked for deletion. Use member_change_status instead.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.member_block

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to block

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for caller or target member
INVALID_ORG403Organisation mismatch between caller and target member
NOT_ENOUGH_PRIVILEGE403Caller does not have sufficient admin privilege
INCORRECT_DOMAIN403Target member has no domain privilege record

adminpanel.member_unblock​

Clear a member's profile blocked flag (set to no). Deprecated: code is marked for deletion. Use member_change_status instead.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.member_unblock

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to unblock

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for caller or target member
INVALID_ORG403Organisation mismatch between caller and target member
NOT_ENOUGH_PRIVILEGE403Caller does not have sufficient admin privilege
INCORRECT_DOMAIN403Target member has no domain privilege record

adminpanel.member_authentification​

Update the OTP authentication method for a specific member. Validates privilege hierarchy and organisation membership before applying. Broadcasts the profile update to the member's active sockets.

PropertyValue
ScopeDomain (requires authentication)
PermissionAdmin (16)

Endpoint:

https://hostname/-/svc/adminpanel.member_authentification

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to update OTP settings for
optionstringNo-OTP method to set. Use sms to enable SMS-based OTP. Defaults to 0 (disabled).

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for caller or target member
INVALID_ORG403Organisation mismatch between caller and target member
NOT_ENOUGH_PRIVILEGE403Caller does not have sufficient admin privilege over the target
INCORRECT_DOMAIN403Target member has no domain privilege record
NO_USER404No member detail record found for the given user_id
NO_PHOME400SMS OTP was requested but the target member has no mobile number registered

adminpanel.prepare_import​

Parse and validate a CSV file for bulk member import. Checks email availability, seat quota limits, and duplicate entries within the file. Returns a per-row validation report before the actual import is committed.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.prepare_import

Parameters​

ParameterTypeRequiredDefaultDescription
uploaded_filestringYes-Filesystem path of the uploaded CSV file to validate (from the uploaded_file input attribute)

Returns​

FieldTypeDescription
typeany-
docany-
itemsobject-
items.statusstringValidation result for this row: Ok, Quota exceeded, Email already exists, or Duplicated email
items.errornumber0 if the row is valid and ready to import, 1 if it has a validation error
items.domainstringOrganisation domain assigned to the member (set only when seat quota is available)
items.categorystringMember category from the organisation configuration

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found or privilege check failed
NOT_ENOUGH_PRIVILEGE403Caller does not have member-admin privilege level

Generate a new random password and send a reset or invitation link to one or more members. Connected members receive a password-change link; unconnected members receive an invitation link. Terminates all existing sessions for each targeted member.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.send_password_link

Parameters​

ParameterTypeRequiredDefaultDescription
usersarrayYes-Array of user IDs to send password links to. Accepts a single string which is normalised to an array.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NOT_ENOUGH_PRIVILEGE403Caller does not have security admin privilege level
NOT_VALID_DRUMATE404One or more user IDs do not correspond to existing users
NOT_VALID_ORG403One or more users do not belong to this organisation

adminpanel.mimic_new​

Initiate an admin impersonation (mimic) session targeting a specific member. For locked or archived members the session is activated immediately without requiring the target's consent. For active members a pending session is created and the target must accept via mimic_active. Broadcasts via WebSocket to both parties.

PropertyValue
ScopeDomain (requires authentication)
PermissionDelete (8)

Endpoint:

https://hostname/-/svc/adminpanel.mimic_new

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member to impersonate. Must differ from the caller's own ID.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
INVALID_USER400Cannot impersonate yourself
NO_ORG404No organisation found for the current domain
MIMIC_ALREADY409A pending or active mimic session already exists for the caller or the target
NOT_ONLINE503Target member is active but not currently connected via WebSocket

adminpanel.mimic_reject​

Reject a pending mimic session. Must be called by the target user (the one being impersonated). Broadcasts the rejection to both parties via WebSocket.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.mimic_reject

Parameters​

ParameterTypeRequiredDefaultDescription
mimic_idstringYes-ID of the pending mimic session to reject

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_MIMIC404No mimic session found for the given mimic_id
INVALID_MIMIC403Current user is not the target (uid) of this mimic session
INVALID_STATUS409Mimic session is not in new status; cannot reject an active session

adminpanel.mimic_active​

Accept and activate a pending mimic session. Must be called by the target user. Verifies that the impersonating admin is currently online before activating.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.mimic_active

Parameters​

ParameterTypeRequiredDefaultDescription
mimic_idstringYes-ID of the pending mimic session to activate

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain
NO_MIMIC404No mimic session found for the given mimic_id
INVALID_MIMIC403Current user is not the target (uid) of this mimic session
INVALID_STATUS409Mimic session is not in new status
NOT_ONLINE503The impersonating admin is not currently connected; session set to noonline status

adminpanel.mimic_end_bymimic​

Terminate an active mimic session initiated by the impersonating admin (mimicker). Restores normal session state and broadcasts the termination to both parties via WebSocket.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.mimic_end_bymimic

Parameters​

ParameterTypeRequiredDefaultDescription
mimic_idstringYes-ID of the active mimic session to end

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_MIMIC404No mimic session found for the given mimic_id
INVALID_MIMIC403Current user is not the mimicker of this session
INVALID_STATUS409Mimic session is not currently active

adminpanel.mimic_end_byuser​

Terminate an active mimic session by the target user being impersonated. Restores normal session state and broadcasts the termination to both parties via WebSocket.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.mimic_end_byuser

Parameters​

ParameterTypeRequiredDefaultDescription
mimic_idstringYes-ID of the active mimic session to end

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_MIMIC404No mimic session found for the given mimic_id
INVALID_MIMIC403Current user is not the target (uid) of this mimic session
INVALID_STATUS409Mimic session is not currently active

adminpanel.mimic_end_bytime​

Terminate an active mimic session that has exceeded its allowed duration. Waits 5 seconds before processing to confirm expiry. Validates that remaining_time has reached 0 before ending. Broadcasts the termination to both parties via WebSocket.

PropertyValue
ScopeDomain (requires authentication)
PermissionAnonymous (1)

Endpoint:

https://hostname/-/svc/adminpanel.mimic_end_bytime

Parameters​

ParameterTypeRequiredDefaultDescription
mimic_idstringYes-ID of the timed-out mimic session to end

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_MIMIC404No mimic session found for the given mimic_id
INVALID_MIMIC403Current user is not the mimicker of this session
INVALID_STATUS409Mimic session is not currently active
INVALID_TIME409Mimic session still has remaining time; cannot end by time expiry

adminpanel.members_whocansee_update​

Update the list of organisation members that a specific member is allowed to see in the directory. All provided users must be valid Drumee users belonging to the same organisation. Self-inclusion is rejected.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.members_whocansee_update

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member whose visibility list to update
usersarrayYes-Array of user IDs that the member is allowed to see. Must all be valid Drumee users in the same organisation and must not include user_id itself.

Returns​

FieldTypeDescription
typeany-
docany-
propertiesany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain or target member
INVALID_ORG403Target member does not belong to the same organisation as the caller
NOT_VALID_DRUMATE400One or more users in the list are invalid or include the target user themselves
NOT_VALID_ORG403One or more users in the list belong to a different organisation

adminpanel.members_whocansee​

Retrieve the current list of organisation members that a specific member is allowed to see in the directory.

PropertyValue
ScopeDomain (requires authentication)
PermissionWrite (8)

Endpoint:

https://hostname/-/svc/adminpanel.members_whocansee

Parameters​

ParameterTypeRequiredDefaultDescription
user_idstringYes-ID of the member whose current visibility list to retrieve

Returns​

FieldTypeDescription
typeany-
docany-
propertiesany-

Possible Errors​

Error CodeHTTP StatusDescription
NO_ORG404No organisation found for the current domain or target member
INVALID_ORG403Target member does not belong to the same organisation as the caller

adminpanel.create_organisation​

Create a new organisation for a user currently on the default domain (domain_id=1) or with no organisation. Creates the domain, grants owner privilege, transfers the existing quota to the new domain, and persists the organisation record.

PropertyValue
ScopeHub (requires hub context)
PermissionOwner (32)

Endpoint:

https://hostname/-/svc/adminpanel.create_organisation

Parameters​

ParameterTypeRequiredDefaultDescription
namestringYes-Display name of the new organisation
identstringYes-Unique identifier for the organisation domain (lowercased). Must not already be registered as a domain ident.

Returns​

FieldTypeDescription
typeany-
docany-

Possible Errors​

Error CodeHTTP StatusDescription
already_in_other_domain409Current user already belongs to a non-default organisation (domain_id > 1)
domain_not_available409Requested ident is already registered as a domain identifier