User access to the Aurora Endpoint Security console and what they can view depends on their permissions. The User API does not support custom roles, including the GET, POST, and DELETE methods.