Today, to get last logon timestamp (know as "com.qlik.user-session.begin") for users we need to parse through a lot of data on the audit api. It would be of great value if this was found directly on the user object. Both on the api "/api/v1/users" and on manage users info as admin on web.
Suggestion: Add the "lastLogon" to the user object like this