For anyone that doesn't know....the API token....the first two digits are the user's ID. I've been racking my brain trying to figure that out and it just hit me.
User ID in token is ID of API key owner account (both ID and token are checked to verify that API key is valid).
User ID used in API key cannot be changed in order to fetch other user's details - to make the call, you'll need both company ID and user ID, as we discussed in this topic.
Might want to mention that in the docs.
Thanks!