diff --git a/pub/api/v1/portal-management/users/index.php b/pub/api/v1/portal-management/users/index.php
index 5c9e324..6152c9e 100644
--- a/pub/api/v1/portal-management/users/index.php
+++ b/pub/api/v1/portal-management/users/index.php
@@ -8,8 +8,27 @@ require_once $_SERVER['DOCUMENT_ROOT'] . '/api/classes/API_users.php';
 $API_users = new API_users();
 
 if ($API_users->request_method === 'GET') {
-    #echo json_encode($api->getAllUsers());
+    $API_users->checkPermissions('admin-access-admins', 'RO');
 
+    $users = $API_users->getUser();
+
+    $removeFields = [
+        'user_profile_picture_thumbnail',
+        'user_password',
+        'user_password_reset_token',
+        'user_two_factor_secret',
+        'user_profile_picture',
+        'user_profile_picture_thumbnail'
+    ];
+
+    foreach ($users as &$user) {
+        foreach ($removeFields as $field) {
+            unset($user[$field]);
+        }
+    }
+    unset($user);
+
+    $API_users->apiOutput($code = 200, ['success' => $users], '');
 
 } elseif ($API_users->request_method === 'POST') {
     # create a new user