provision and audit acc account users, companies, and project membership via the acc account admin (hq) api

Steps

1. Authenticate with either 2-legged or 3-legged OAuth — the Admin API (formerly Hub Admin API) supports both, unlike the Forms API.
2. List all projects in an account with GET https://developer.api.autodesk.com/construction/admin/v1/accounts/{accountId}/projects, and a project's members with GET projects/{projectId}/users.
3. Reverse-lookup a user's project access with GET users/{userId}/projects, and their product entitlements/roles with GET accounts/{accountId}/users/{userId}/products and .../roles.
4. Manage the company directory with GET accounts/{accountId}/companies (filterable by name, trade, ERP ID, tax ID, status), and get a project's assigned companies with GET projects/{projectId}/companies.
5. Create/update projects (from scratch or a template) and add, update, or remove project users through the corresponding write endpoints on the same admin/v1 base path.
6. Verify which product an accountId belongs to before assuming feature parity — the same admin/v1 endpoints are documented to work against both classic BIM 360 and current ACC/Forma-migrated accounts.