> ## Documentation index
> Fetch the complete documentation index at: https://developer.rhombus.com/llms.txt
> Use it to discover all available pages before exploring further.

# Find access control credentials by user

> Find all access control credentials for the specified user

```http
POST https://api2.rhombussystems.com/api/accesscontrol/findAccessControlCredentialByUser
```

EU organizations send the same request to `https://api2.eu.rhombussystems.com`.

## Authentication and parameters

- `x-auth-apikey` (header, required): Your Rhombus API key. Must be accompanied by the `x-auth-scheme` header set to `api-token` (or `partner-api-token` for partner endpoints).
- `Authorization` (header): instead of an API key, an OAuth access token (`Bearer <token>`) with the `read` scope.
- `x-auth-scheme` (header, string, default: `api-token`): Authentication scheme identifier. Use `api-token` or `partner-api-token` with the `x-auth-apikey` header, `api` or `partner-api` with `x-auth-apikey` plus a client certificate, `api-oauth-token` or `partner-api-oauth-token` with `x-auth-access-token`, and `federated-token` with `x-auth-ft`. A request with `Authorization: Bearer <token>` and no `x-auth-scheme` is treated as OAuth, and `federated-token` may also be sent as the `x-auth-scheme` and `x-auth-ft` query parameters. One of: `api-token`, `api`, `api-oauth-token`, `federated-token`, `partner-api-token`, `partner-api`, `partner-api-oauth-token`.
- `x-auth-org` (header, string<RUUID>): Client organization UUID (22-character RUUID), for partner credentials only. With it the call runs in that client organization with the partner support authority's role. Without it a partner credential runs as the partner organization, which outside the partner endpoints is deprecated (responses carry `Deprecation` and `Sunset: Tue, 05 Jan 2027 00:00:00 GMT`). A malformed value returns 400 `INVALID_AUTH_ORG`; a client organization the partner cannot access returns 403 `PARTNER_CLIENT_ACCESS_DENIED`.

## Request body

Content type: `application/json`. Request to find access control credentials by user.

- `filter` (object): Filter criteria for finding credential history
- `userUuid` (string<RUUID> | null): base 64 (url-safe) uuid string

## Response 200

OK. Content type: `application/json`

- `credentials` (array<object> | null): List of access control credentials

## Errors

Also 400, 401, 403, 429, 500, 503 with the standard error body (`errorCode`, `errorMsg`): https://developer.rhombus.com/errors

## OpenAPI

````yaml
openapi: 3.0.1
info:
  title: Rhombus API
  version: "1.0"
servers:
  - description: Production Server
    url: https://api2.rhombussystems.com
security:
  - ApiKeyAuth: []
paths:
  /api/accesscontrol/findAccessControlCredentialByUser:
    post:
      description: Find all access control credentials for the specified user
      operationId: findAccessControlCredentialByUser
      parameters:
        - description: "Authentication scheme identifier. Use `api-token` or `partner-api-token` with the `x-auth-apikey` header, `api` or `partner-api` with `x-auth-apikey` plus a client certificate, `api-oauth-token` or `partner-api-oauth-token` with `x-auth-access-token`, and `federated-token` with `x-auth-ft`. A request with `Authorization: Bearer <token>` and no `x-auth-scheme` is treated as OAuth, and `federated-token` may also be sent as the `x-auth-scheme` and `x-auth-ft` query parameters."
          example: api-token
          in: header
          name: x-auth-scheme
          required: false
          schema:
            default: api-token
            enum:
              - api-token
              - api
              - api-oauth-token
              - federated-token
              - partner-api-token
              - partner-api
              - partner-api-oauth-token
            type: string
        - description: "Client organization UUID (22-character RUUID), for partner credentials only. With it the call runs in that client organization with the partner support authority's role. Without it a partner credential runs as the partner organization, which outside the partner endpoints is deprecated (responses carry `Deprecation` and `Sunset: Tue, 05 Jan 2027 00:00:00 GMT`). A malformed value returns 400 `INVALID_AUTH_ORG`; a client organization the partner cannot access returns 403 `PARTNER_CLIENT_ACCESS_DENIED`."
          in: header
          name: x-auth-org
          required: false
          schema:
            format: RUUID
            maxLength: 22
            minLength: 22
            type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/Accesscontrol_credentials_FindAccessControlCredentialByUserWSRequest"
      responses:
        "200":
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Accesscontrol_credentials_FindAccessControlCredentialByUserWSResponse"
          description: OK
        "400":
          $ref: "#/components/responses/BadRequest"
        "401":
          $ref: "#/components/responses/Unauthorized"
        "403":
          $ref: "#/components/responses/Forbidden"
        "429":
          $ref: "#/components/responses/TooManyRequests"
        "500":
          $ref: "#/components/responses/InternalServerError"
        "503":
          $ref: "#/components/responses/ServiceUnavailable"
      security:
        - ApiKeyAuth: []
        - oauth2:
            - read
      summary: Find access control credentials by user
      tags:
        - Access Control Webservice
components:
  schemas:
    Accesscontrol_credentials_FindAccessControlCredentialByUserWSRequest:
      description: Request to find access control credentials by user.
      properties:
        filter:
          $ref: "#/components/schemas/CredentialQueryFilter"
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
      type: object
    CredentialQueryFilter:
      description: Filter criteria for finding credential history
      properties:
        credTypeFilter:
          items:
            $ref: "#/components/schemas/AccessControlCredentialEnumType"
          nullable: true
          type: array
          uniqueItems: true
        lastUsedAccessControlledDoorUuidFilter:
          items:
            description: base 64 (url-safe) uuid string
            example: AAAAAAAAAAAAAAAAAAAAAA
            format: RUUID
            nullable: true
            type: string
          nullable: true
          type: array
          uniqueItems: true
        lastUsedAfterFilter:
          format: int64
          nullable: true
          type: integer
        lastUsedBeforeFilter:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuidFilter:
          items:
            description: base 64 (url-safe) uuid string
            example: AAAAAAAAAAAAAAAAAAAAAA
            format: RUUID
            nullable: true
            type: string
          nullable: true
          type: array
          uniqueItems: true
        workflowStatusFilter:
          items:
            $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
          nullable: true
          type: array
          uniqueItems: true
      type: object
    AccessControlCredentialEnumType:
      enum:
        - STANDARD_CSN
        - RHOMBUS_SECURE_CSN
        - RHOMBUS_SECURE_MOBILE
        - APPLE_WALLET_DESFIRE
        - RHOMBUS_SECURE_NFC
        - PIN_CODE
        - WIEGAND_H10301
        - WIEGAND_H10304
        - WIEGAND_H10302
        - WIEGAND_D10202
        - WIEGAND_64BIT_RAW
        - HID_CORP1000_STD_35
        - HID_CORP1000_STD_48
        - QR_CODE_STATIC
        - CUSTOM
      type: string
    AccessControlCredentialWorkflowStatusEnumType:
      enum:
        - ACTIVE
        - UNASSIGNED
        - SUSPENDED
        - REVOKED
      type: string
    Accesscontrol_credentials_FindAccessControlCredentialByUserWSResponse:
      description: Response containing access control credentials found for a specific user.
      properties:
        credentials:
          description: List of access control credentials
          items:
            $ref: "#/components/schemas/AccessControlCredentialType"
          nullable: true
          type: array
      type: object
    AccessControlCredentialType:
      description: Credentials assigned to the pass.
      discriminator:
        propertyName: type
      oneOf:
        - $ref: "#/components/schemas/StandardCsnType"
        - $ref: "#/components/schemas/RhombusSecureCsnType"
        - $ref: "#/components/schemas/RhombusSecureMobileType"
        - $ref: "#/components/schemas/PinCredential"
        - $ref: "#/components/schemas/WiegandH10301CredentialType"
        - $ref: "#/components/schemas/WiegandH10304Credential"
        - $ref: "#/components/schemas/WiegandH10302Credential"
        - $ref: "#/components/schemas/WiegandD10202Credential"
        - $ref: "#/components/schemas/Wiegand64BitRawCredentialType"
        - $ref: "#/components/schemas/Wiegand35BitCorp1000Credential"
        - $ref: "#/components/schemas/Wiegand48BitCorp1000Credential"
        - $ref: "#/components/schemas/QrCodeStaticCredential"
        - $ref: "#/components/schemas/CustomCredential"
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    StandardCsnType:
      allOf: []
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    AccessControlCredentialAssigneeTypeEnum:
      enum:
        - USER
        - GUEST_PASS
      type: string
    RhombusSecureCsnType:
      allOf:
        - properties:
            algorithm:
              $ref: "#/components/schemas/SecureTokenAlgorithmEnum"
            baseKeyIdentifier:
              format: int32
              nullable: true
              type: integer
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    SecureTokenAlgorithmEnum:
      enum:
        - AN10922_AES128
      type: string
    RhombusSecureMobileType:
      allOf:
        - properties:
            algorithm:
              $ref: "#/components/schemas/SecureTokenAlgorithmEnum"
            appName:
              nullable: true
              type: string
            appNotifications:
              $ref: "#/components/schemas/RhombusSecureMobileFeature"
            appOS:
              nullable: true
              type: string
            appStatusUpdatedAtMillis:
              format: int64
              nullable: true
              type: integer
            appVersion:
              nullable: true
              type: string
            baseKeyIdentifier:
              format: int32
              nullable: true
              type: integer
            clientType:
              $ref: "#/components/schemas/MobileTokenOSEnum"
            deviceModel:
              nullable: true
              type: string
            installationId:
              nullable: true
              type: string
            tapToUnlock:
              $ref: "#/components/schemas/RhombusSecureMobileFeature"
            userAgent:
              nullable: true
              type: string
            waveToUnlock:
              $ref: "#/components/schemas/RhombusSecureMobileFeature"
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    RhombusSecureMobileFeature:
      nullable: true
      properties:
        settings:
          items:
            $ref: "#/components/schemas/RhombusSecureMobileFeatureSetting"
          nullable: true
          type: array
        status:
          $ref: "#/components/schemas/RhombusSecureMobileFeatureStatusEnum"
      type: object
    RhombusSecureMobileFeatureSetting:
      nullable: true
      properties:
        name:
          nullable: true
          type: string
        status:
          $ref: "#/components/schemas/RhombusSecureMobileFeatureSettingStatusEnum"
        value:
          nullable: true
          type: string
      type: object
    RhombusSecureMobileFeatureSettingStatusEnum:
      enum:
        - OPTIMAL
        - INHIBITED
      type: string
    RhombusSecureMobileFeatureStatusEnum:
      enum:
        - OPT_OUT
        - UNAVAILABLE
        - OPTIMAL
        - INHIBITED
        - UNKNOWN
      type: string
    MobileTokenOSEnum:
      enum:
        - IOS
        - ANDROID
      type: string
    PinCredential:
      allOf: []
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    WiegandH10301CredentialType:
      allOf:
        - properties:
            cardNumber:
              format: int32
              nullable: true
              type: integer
            facilityCode:
              format: int32
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
            nonParityValue:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    WiegandFormatEnumType:
      enum:
        - H10301
        - D10202
        - H10304
        - H10302
        - HID_CORP1000_STD_35
        - HID_CORP1000_STD_48
        - WIEGAND_64BIT_RAW
        - CUSTOM
      type: string
    WiegandH10304Credential:
      allOf:
        - properties:
            cardNumber:
              format: int32
              nullable: true
              type: integer
            facilityCode:
              format: int32
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
            nonParityValue:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    WiegandH10302Credential:
      allOf:
        - properties:
            cardNumber:
              format: int64
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
            nonParityValue:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    WiegandD10202Credential:
      allOf:
        - properties:
            cardNumber:
              format: int32
              nullable: true
              type: integer
            facilityCode:
              format: int32
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
            nonParityValue:
              nullable: true
              type: string
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    Wiegand64BitRawCredentialType:
      allOf:
        - properties:
            cardNumber:
              format: int64
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    Wiegand35BitCorp1000Credential:
      allOf:
        - properties:
            cardNumber:
              format: int64
              nullable: true
              type: integer
            companyId:
              format: int32
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    Wiegand48BitCorp1000Credential:
      allOf:
        - properties:
            cardNumber:
              format: int64
              nullable: true
              type: integer
            companyId:
              format: int32
              nullable: true
              type: integer
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    QrCodeStaticCredential:
      allOf:
        - properties:
            formatVersion:
              format: int32
              nullable: true
              type: integer
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
    CustomCredential:
      allOf:
        - properties:
            bitGroupValues:
              additionalProperties:
                format: int64
                nullable: true
                type: integer
              nullable: true
              type: object
            customFormatName:
              nullable: true
              type: string
            format:
              $ref: "#/components/schemas/WiegandFormatEnumType"
            naturalId:
              nullable: true
              type: string
            numBits:
              format: int32
              nullable: true
              type: integer
          type: object
      nullable: true
      properties:
        assigneeType:
          $ref: "#/components/schemas/AccessControlCredentialAssigneeTypeEnum"
        assigneeUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        createdAtMillis:
          format: int64
          nullable: true
          type: integer
        endDateEpochSecExclusive:
          format: int64
          nullable: true
          type: integer
        lastUsedAccessControlledDoorUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lastUsedAtMillis:
          format: int64
          nullable: true
          type: integer
        lastUsedLocationUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        lowercaseHexValue:
          nullable: true
          readOnly: true
          type: string
        managedCredUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        note:
          nullable: true
          type: string
        orgUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        startDateEpochSecInclusive:
          format: int64
          nullable: true
          type: integer
        type:
          $ref: "#/components/schemas/AccessControlCredentialEnumType"
        updatedAtMillis:
          format: int64
          nullable: true
          type: integer
        userUuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        uuid:
          description: base 64 (url-safe) uuid string
          example: AAAAAAAAAAAAAAAAAAAAAA
          format: RUUID
          nullable: true
          type: string
        value:
          nullable: true
          type: string
        workflowStatus:
          $ref: "#/components/schemas/AccessControlCredentialWorkflowStatusEnumType"
      type: object
  securitySchemes:
    ApiKeyAuth:
      description: Your Rhombus API key. Must be accompanied by the `x-auth-scheme` header set to `api-token` (or `partner-api-token` for partner endpoints).
      in: header
      name: x-auth-apikey
      type: apiKey
    oauth2:
      description: 'OAuth 2.0 authorization code flow with PKCE (`S256`). Send the access token as `Authorization: Bearer <token>`. Each operation lists the scopes it requires; a token without them is refused 403 with `WWW-Authenticate: Bearer error="insufficient_scope"`.'
      flows:
        authorizationCode:
          authorizationUrl: https://console.rhombus.com/oauth/authorize
          refreshUrl: https://auth-web.rhombussystems.com/oauth/token
          scopes:
            physical: Unlock doors and elevators, lockdown, alarms, speakers and robots
            read: View cameras, footage and settings
            write: Change settings and data
          tokenUrl: https://auth-web.rhombussystems.com/oauth/token
      type: oauth2
````