Every route below requires an administrator bearer token, with a current password (mustResetPassword: false — see Auth).

​
POST /operators

​
string
required
​
string
default:"operator"
operator | administrator
​
string
required
201 Created
The new operator is forced through a password reset on first login, same as any admin-issued account.

​
POST /operators/{id}/reset-password

The only way an operator’s password can be reset — there is no self-service or email-based reset path anywhere in this codebase for an attacker to hijack. Issues a fresh temp password and re-flags mustResetPassword.
200 OK

​
PATCH /operators/{id}

​
string
operator | administrator
​
string
active | deactivated

​
DELETE /operators/{id}

Deactivates (status = "deactivated") rather than hard-deletes — offboarding is instant, but the operator row and its full SearchLog/AuditEvent history are retained.