myDirectReports

The caller's direct reports: ACTIVE identities whose manager is the caller. Self-scoped by construction — no arguments, no filter and no pagination (capped at 200 rows), so it cannot be steered into an identity search, and it needs no identity.read gate for the same reason myProfile doesn't. Empty for anyone who manages nobody. Matches on the DIRECT manager_id linkage — the same linkage the authz manager relationship resolver tests — so this list and any policy that authorizes requesting on a report's behalf cannot disagree about who reports to whom.

myDirectReports: [DirectReport!]!

Type

DirectReport object

One person the caller manages — an on-behalf target for the request flow's "Requesting for" control. Deliberately lean: just enough to name and picture a picker option, with no attributes, no status and no nested Identity, so it can never become a back door into the directory.