Get the currently authenticated admin user
Returns the authenticated admin user along with current permissions, feature entitlements and the server-derived access manifest. Used by the admin web app on app boot / route guard checks. Requires authentication via Passport bearer token or API key. Returns 401 if unauthenticated and 403 when onboarding, workspace, membership or access-role eligibility blocks access.
Authorizations
Passport bearer token authentication for legacy admin sessions.
Response
Authenticated user + group permissions.
"success"
An admin user — staff member of a client organization. Authenticates via Laravel Passport (bearer JWT) for the admin web app, and may also issue API keys (via ApiKey) for server-to-server integrations. Permissions are stored as JSON keyed by feature; group membership (group_id) supplies a baseline permission set on top of the per-user override.
Resolved organization feature entitlements with live AI quota usage where available. Null when resolution fails.
Server-derived access role and effective authority for the authenticated staff member.
Decoded permissions map from the user's group. Empty object when the group has no permissions JSON.