This is imprecise from the spec wording [1], apart from a hint [2], but these should really be user ids. In practice, this is what Synapse returns too [1]https://spec.matrix.org/latest/client-server-api/#_matrixclientv3sync_roomsummary [2] "The list must never include the client’s own user ID."