# User Account

 - [POST /user-authentication](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/userauthentication.md): Starts User Authentication
 - [POST /user-refresh-tokens](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/refreshusertokens.md): Uses the Refresh Token to obtain new JWT tokens to extend the user's session.
 - [POST /change-temporary-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/userchangetemppassword.md): Changes a User's temporary password.
 - [POST /forgot-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/forgotpassword.md): Begin password recovery flow. Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password.
 - [POST /confirm-forgot-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/confirmforgotpassword.md): Allows a user to enter a confirmation code to reset a forgotten password.
 - [POST /users/{userID}/change-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/userchangepassword.md): User requests to change their password.
 - [POST /users/{userID}/admin-reset-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/userresetpassword.md): Admin request to reset a User's password. When an Administrator calls this API, the User's current password is invalidated and must be changed. If a user tries to sign in after the API is called, the
 - [POST /users/{userID}/admin-disable](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/admindisableuser.md): Admin request to disable a User.
 - [POST /users/{userID}/admin-enable](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/adminenableuser.md): Admin request to enable a User.
 - [POST /users/{userID}/resend-confirmation-code](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/adminresendconfirmationcode.md): Resends a User a confirmation code.
 - [POST /users/{userID}/resend-welcome-message](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/adminresendwelcomemesasge.md): Resends the invitation message to a user that already exists and resets the expiration on the user's sign-up window.
 - [PUT /users/{userID}/lock](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/lockuseraccount.md): Locks a specific user account to prevent access
 - [PUT /users/{userID}/unlock](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user-account/unlockuseraccount.md): Unlocks a specific user account to grant access