Get All Authorized Users (Subprofiles)

This endpoint retrieves detailed information about every authorized user (subprofile) linked to a given business profile. The response consolidates each authorized user's payment cards, financial accounts, and access rights into a single unified view. Use this endpoint to audit and manage subprofile configurations at scale.

Endpoint

GET /netevia/profile/{id}/subProfiles

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint when you need a comprehensive snapshot of all authorized users under a business profile — for example, to display a management dashboard, audit access levels, or verify which payment cards and financial accounts are assigned to each authorized user. This endpoint is only applicable to business customers, since subprofiles (authorized users) are a business-only feature.

Path Parameters

Response

200 OK

Returns an array of subprofile objects. Each object contains the fields listed below.

Subprofile object (boardingsubprofilemodel)

Payment card object (paymentcardmodel)

Financial account object (boardingfinancialaccountmodel)

Address object (addressinput)

[
  {
    "id": 1042,
    "nickName": "Jane Finance",
    "email": "[email protected]",
    "givenName": "Jane",
    "familyName": "Doe",
    "department": "Finance",
    "paymentCards": [
      {
        "id": "card_7a3f8b2e1c904d56",
        "formFactor": "Virtual",
        "bin": "411111",
        "last4": "4242",
        "status": "ACTIVE",
        "financialAccountId": "acct_9d1e2f3a4b5c6d7e",
        "isMainCard": true,
        "network": "Visa",
        "isEmailNotify": true,
        "isPushNotify": false,
        "financialAccount": {
          "id": "acct_9d1e2f3a4b5c6d7e",
          "last4": "7890",
          "name": "Operating Account",
          "type": "CHECKING",
          "accountStatus": "OPEN",
          "routingNumber": "021000021",
          "clientName": "Acme Corp"
        },
        "cardName": "Travel Expenses",
        "expirationDate": "2027-08"
      }
    ],
    "financialAccounts": [
      {
        "id": "acct_9d1e2f3a4b5c6d7e",
        "name": "Operating Account",
        "last4": "7890",
        "routingNumber": "021000021",
        "status": "OPEN",
        "created": "2024-03-15T10:30:00Z",
        "availableCash": 500000
      }
    ],
    "accesses": ["Limited"],
    "isMfaEnabled": true,
    "isOtpEnabled": false,
    "created": "2024-03-15T09:00:00Z",
    "phone": "+15555550101",
    "address": {
      "streetAddress": "123 Main Street",
      "extendedAddress": "Suite 400",
      "postalCode": "10001",
      "locality": "New York",
      "region": "NY",
      "countryCodeAlpha3": "USA"
    }
  }
]

Error Codes

Common Mistakes

• Passing a personal customer profile id instead of a business profile id — subprofiles only exist for business customers; the response will be empty or return a 404.
• Using an expired Bearer token — tokens expire after 10 minutes; refresh via POST /api/auth/refresh before making this call.
• Treating availableCash as a dollar amount — it is expressed in the smallest currency unit (cents), so 500000 equals $5,000.00.
• Expecting card numbers in full — the response only returns last4 and bin for security; full card numbers are never returned by this endpoint.

Related Endpoints

• POST /netevia/profile/{id}/subProfile — Create a new authorized user under a business profile
• GET /netevia/profile/{id}/subProfile/{subProfileId} — Retrieve a single authorized user by subprofile ID
• PUT /netevia/profile/{id}/subProfile/{subProfileId} — Update an existing authorized user's details or access level
• DELETE /netevia/profile/{id}/subProfile/{subProfileId} — Remove an authorized user from a business profile

Example

curl -X GET https://api.banking.netevia.dev/netevia/profile/1042/subProfiles \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json"