Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

User → Get

AI-generated

Summary

Retrieves a single Datto EDR user record by ID via a GET to the API's users/{id} endpoint, optionally limiting which fields come back.

Inputs

  • userId (required) — ID of the user to fetch. Throws an error if empty.
  • options.fields — Comma-separated list of field names to include in the response. Sent as a LoopBack fields filter.
  • options.order — Sort order string. Shown in the UI but ignored by Get, which does not send it.
  • options.whereJson — Raw LoopBack where clause as JSON. Shown in the UI but ignored by Get, which does not send it.

Output shape

One output item per input item, containing the user record as returned by the Datto EDR API.

API errors (401, 403, 404, 429 and others) are raised as node errors with the status and detail. With Continue On Fail enabled, the item contains {error: message} instead. Requires the dattoEdrApi credential, whose Base URL should end in /api.

Examples

Example 1: Look up a user's details from an ID found in another step.

Resource: User, Operation: Get, User ID: {{ $json.userId }}

Example 2: Fetch only the email and username of a user.

User ID: abc123; Options > Fields: "email,username"

Links

Discussion