GET/users endpoint should indicate thatexternalProfile.externalId andexternalProfile.organizationId needenrich to betrue. Else they are ignored.

Also, test ifroleId query param for this endpoint works (I think not)