---
title: "POST /users/"
method: POST
path: "/users/"
tags: ["users"]
---

# POST /users/

`POST /users/`

Create a user

## Request body

- UserCreateUpdate
  - `username` string, required — The user's log in name.
  - `first_name` string
  - `last_name` string
  - `email` string, email
  - `password` string, required
  - `is_superuser` boolean — Designates that this user has all permissions without explicitly assigning them.

## Response `201`

Return the created user.

- UserDetail
  - `id` integer, required
  - `username` string, required — The user's log in name.
  - `email` string, email
  - `first_name` string
  - `last_name` string
  - `is_superuser` boolean — Designates that this user has all permissions without explicitly assigning them.
  - `resource` object, required
  - `created_at` string, date-time, required
  - `modified_at` string, date-time, required

## Other responses

- `403` — Create is prohibited

## Changes

- **2026-07-17** `c04fc5f09692` — 1 info
  - added the non-success response with the status `403`
- **2024-04-23** `cbf68ddd9760` — 1 breaking, 3 warning, 6 info
  - removed the required property `roles` from the response with the `201` status
  - removed the request property `roles` (media type: application/json)
  - removed the request property `roles` (media type: application/x-www-form-urlencoded)
  - removed the request property `roles` (media type: multipart/form-data)
  - …6 more
- **2023-08-21** `c84b4813cab1` — 1 breaking, 5 info
  - the `username` response property's maxLength was unset from `150` for the response status `201`
  - the endpoint scheme security `cookieAuth` was added to the API
  - removed the pattern `^[\w.@+-]+$` from the request property `username` (media type: application/json)
  - removed the pattern `^[\w.@+-]+$` from the request property `username` (media type: application/x-www-form-urlencoded)
  - …2 more
- **2023-05-19** `f84d9240fdf2` — 2 info
  - the endpoint scheme security `cookieAuth` was removed from the API
  - added the optional property `is_superuser` to the response with the `201` status
- …earlier changes not shown

[Full history](https://skmtc.dev/ansible/apis/event-driven-ansible-api/changes/users/post.md)

---

[API](https://skmtc.dev/ansible/apis/event-driven-ansible-api.md) · [All operations](https://skmtc.dev/ansible/apis/event-driven-ansible-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ansible/event-driven-ansible-api/revisions/c04fc5f09692/schema)