All I'm trying to do is use the API to get a list of users, and then impersonate said users to disable sharing links. However, right out the gate, I'm stymied: I successfully retrieve an access token and can get my user information, but any call to /users returns:
b'{"total_count":0,"entries":[],"limit":100,"offset":0}'
I have full control over the app, and it has as many permissions I could give it, including "Manage user".
What am I doing wrong?
Rgds, Peter Christensen, Platform Solutions Engineer, Box