LoginUserModel

User's account-creation timestamp (ISO 8601). Nullable because historical rows may have no value. The customer portal converts to Unix seconds for Intercom's created_at field; omits the field from the Intercom boot call when null.

The id of your tenant's Default resource group — where a create that names no group lands.

User's login email address (distinct from notificationFromEmail, which is your tenant's outbound notification address). Required by the Intercom integration.

Tenant type code (e.g., customer, demo_tenant)

Feature codes that are currently enabled for your tenant

Signed JWT for Intercom Messenger Identity Verification. The customer portal passes this to Intercom's boot() as intercom_user_jwt. Omitted when Identity Verification is not configured on the backend (e.g., dev environments without INTERCOM_IDENTITY_VERIFICATION_SECRET).

The grants of the credential making the request — the user's own assignments for a session or an inheriting API key, the key's role alone for a role-scoped key — in "resource:action" format for UI conditional rendering

The roles of the credential making the request (deduplicated by name) — the user's own assignments for a session or an inheriting API key, the key's role alone for a role-scoped key — for role-based UI logic