# Guest users not visible in /api/search and are not External Collaborators

**URL:** <https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242>\
**Category:** Confluence Cloud\
**Tags:** external-collaborators, rest-api\
**Created:** [June 12, 2023, 5:30am UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242 "2023-06-12T05:30:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chris\_at\_DigitalRose](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/chris_at_digitalrose/32/41070_2.png) [@Chris\_at\_DigitalRose](https://community.developer.atlassian.com/u/Chris_at_DigitalRose)\
**Post date:** [June 12, 2023, 5:30am UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/1 "2023-06-12T05:30:45Z")

</div>

Hi all,

With Atlassian’s decision to allow Guest users access to apps after [RFC-9: Blocking Guest Access to Apps](https://community.developer.atlassian.com/t/rfc-9-blocking-guest-access-to-apps/68931), we started looking into the API changes needed in our apps to support this and identify guests. So far 2 items that appear to be blockers. I assume these will affect other vendors as well.

#1 User Search  
Today we use /wiki/rest/api/search?cql=user.fullname~(query) to source a user picklist in our app. As of today it appears that guest users are not returned? Is there an alternate API that has the guest users?

#2 User isExternalCollaborator  
And if the isExternalCollaborator flag is supposed to indicate guest users in the /wiki/rest/api/user, it isn’t working yet. We can lookup a guest user by accountId but the isExternalCollaborator is reporting false currently.

Both of these API’s are going to be necessary for our Confluence apps to work with Guest users. Would appreciate any updates from Atlassian on an ETA, or if there are alternate API’s we should be using.

Chris  
Digital Rose

---

<div class="post-metadata">

**Author:** ![tpettersen](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/tpettersen/32/35449_2.png) [@tpettersen](https://community.developer.atlassian.com/u/tpettersen)\
**Post date:** [June 16, 2023, 7:23am UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/2 "2023-06-16T07:23:49Z")

</div>

Thanks for the report Chris!

We’re currently working on a guide for how to handle external collaborators in apps. We’ll investigate these two questions and ensure they’re addressed in the content. I’ll follow up here once the guide is ready.

cheers,  
Tim

---

<div class="post-metadata">

**Author:** ![Chris\_at\_DigitalRose](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/chris_at_digitalrose/32/41070_2.png) [@Chris\_at\_DigitalRose](https://community.developer.atlassian.com/u/Chris_at_DigitalRose)\
**Post date:** [July 21, 2023, 6:04am UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/3 "2023-07-21T06:04:05Z")

</div>

Hi all, it appears like Atlassian has done some work on this over the past month as the /search/users API does now have a filter to include guests (externalCollabators). See [https://developer.atlassian.com/cloud/confluence/rest/v1/api-group-search/#api-wiki-rest-api-search-user-get](https://developer.atlassian.com/cloud/confluence/rest/v1/api-group-search/#api-wiki-rest-api-search-user-get)

In our test the search does now return guest users if the new filter is used. The flag “isExternalCollaborator” is still wrong though (false).

PS. If this is a new API and these users are now known as “Guest” users, I think it would be easier to understand the API if it referred to these account types as guest users instead of “ExternalCollaborators”.

---

<div class="post-metadata">

**Author:** ![marc](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/marc/32/39047_2.png) [@marc](https://community.developer.atlassian.com/u/marc)\
**Post date:** [August 15, 2023, 1:50pm UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/4 "2023-08-15T13:50:44Z")

</div>

Hi @tpettersen ,  
Is there a timeline when we can expect the guide for app developers for guest users? It seems guest users are out of beta.

---

<div class="post-metadata">

**Author:** ![david](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/david/32/44964_2.png) [@david](https://community.developer.atlassian.com/u/david)\
**Post date:** [January 26, 2024, 10:30am UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/5 "2024-01-26T10:30:02Z")

</div>

@tpettersen This guest user feature is all very poorly thought out and executed.

It seems that the “[get current user](https://developer.atlassian.com/cloud/confluence/rest/v1/api-group-users/#api-wiki-rest-api-user-get)” api cannot be relied on to return anything truthful.

- It always returns `"accountType": "atlassian",` even if the user is a guest. It even states this in the docs. Who knows what other values might be valid.
- `"isExternalCollaborator"` is always false - for normal users and also guests. Again, there is no documentation on when the condition would be true.

**If you’re developing for Forge, I can’t see any way to determine if the current user is a guest user.**

**For Atlassian Connect** , we can at least add the request parameter `&isExternalCollaborator={user.isExternalCollaborator}` to our connect URLs.

It’s really time for Atlassian to get this fixed and write some documentation on the APIs that can be relied on for truthful data.

---

<div class="post-metadata">

**Author:** ![david](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/david/32/44964_2.png) [@david](https://community.developer.atlassian.com/u/david)\
**Post date:** [January 26, 2024, 2:49pm UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/6 "2024-01-26T14:49:50Z")

</div>

I’ve looked into this some more and notice that the user rest apis are actually expandable on `isExternalCollaborator`.

This means that unless you specifically add `?expand= isExternalCollaborator` onto the URL, `isExternalCollaborator` is displayed in the response, but it is not truthful.

Examples:

❌ Incorrect data / `"isExternalCollaborator": false`:

```auto
GET: https://hiya.atlassian.net/wiki/rest/api/user/current

{
	"type": "known",
	"accountId": " ****:************",
	"accountType": "atlassian",
	"email": "myguestuser@gmail.com",
	"publicName": "myguestuser",
	"profilePicture": {
		...
	},
	"displayName": "myguestuser",
	"isExternalCollaborator": false,
	"_expandable": {
		"operations": "",
		"personalSpace": ""
	},
	"_links": {
		"self": "https://hiya.atlassian.net/wiki/rest/api/user?accountId= ****:************",
		"base": "https://hiya.atlassian.net/wiki",
		"context": "/wiki"
	}
}

```

✅ Correct data / `"isExternalCollaborator": true`:

```auto
GET: https://hiya.atlassian.net/wiki/rest/api/user/current?expand=isExternalCollaborator

{
	"type": "known",
	"accountId": " ****:************",
	"accountType": "atlassian",
	"email": "myguestuser@gmail.com",
	"publicName": "myguestuser",
	"profilePicture": {
		...
	},
	"displayName": "myguestuser",
	"isExternalCollaborator": true,
	"_expandable": {
		"operations": "",
		"personalSpace": ""
	},
	"_links": {
		"self": "https://hiya.atlassian.net/wiki/rest/api/user?accountId= ****:************",
		"base": "https://hiya.atlassian.net/wiki",
		"context": "/wiki"
	}
}

```

Of course, it was not listed in `_expandable` , but actually _is_ mentioned in the [docs](https://developer.atlassian.com/cloud/confluence/rest/v1/api-group-users/#api-wiki-rest-api-user-current-get) if you fully expand `expand`.

This is likely to be similar for  
`/wiki/rest/api/user?accountId=xxx&expand=isExternalCollaborator`, but I have not tried it yet.

---

<div class="post-metadata">

**Author:** ![pch](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/pch/32/34104_2.png) [@pch](https://community.developer.atlassian.com/u/pch)\
**Post date:** [January 27, 2026, 11:14am UTC](https://community.developer.atlassian.com/t/guest-users-not-visible-in-api-search-and-are-not-external-collaborators/70242/7 "2026-01-27T11:14:11Z")

</div>

Was there any update on that one? Can we get guest users with the search API?
