Users
User endpoints cover both self-service operations (viewing your own profile) and admin operations (managing all users). All operations are scoped to the current application — users in one application are completely invisible to another.
Self-Service
Self-service endpoints require a valid bearer token but no operator role.
Admin Operations
Admin endpoints require the admin role.