I have another question. Does the following apis in the picture are served by both of apiserver and webserver, or just one of them ?

A users.get_all request will return the users in the company to which the calling user is authenticated to. So, if you only get the users from the original default company ID and not those from newID, it means the credentials you're using to call this endpoint are associated in the server with the original company ID, and not with the newID

Just the apiserver

<webserver>/api is a reverse proxy

Thanks a lot! I’ ll replace credentials with new user in assigned to a new company ID to call users.get_all again.