---
title: "createResellerUser"
method: POST
path: "/v2/distributors/resellers/{resellerId}/users"
tags: ["Partner Portal"]
---

# createResellerUser

`POST /v2/distributors/resellers/{resellerId}/users`

## Request

- Base URL: `https://api.cloudally.com`
- URL: `https://api.cloudally.com/v2/distributors/resellers/{resellerId}/users`
- Auth: none declared
- TypeScript: <https://skmtc.dev/cloudally/apis/cloudally-rest-api/docs/v2/distributors/resellers/:resellerId/users/post.ts> (a function with typed inputs; its response is checked against the schema)

Create a secondary user under a specific reseller. Use role='administrator' for full permissions or role='custom' with a permissions block. Set accessType='all' for access to all accounts, or 'custom' with accountIds for specific accounts.

## Path parameters

- `resellerId` string, required

## Request body

- CreateCustomRoleUserDTO: Request body for creating a partner user with a custom role
  - `email` string, email, required: User email address
  - `password` string, required: User password
  - `role` string, required: User role. Use 'custom' to apply the fine-grained permissions block. Use role='administrator' for full permissions or role='custom' with a permissions block
  - `permissions` PermissionsDTO: Permission groups for the user
    - `partnerPortalOperations` PartnerPortalOperationsDTO: Partner Portal operation permissions
      - `viewPartnerSettingsPage` boolean: Can view the Partner Settings page
      - `viewBillingPage` boolean: Can view the Billing page
      - `viewBillingNotification` boolean: Can view Billing notifications
      - `viewDashboard` boolean: Can view the Dashboard
      - `viewSecurityAuditPage` boolean: Can view the Security Audit page
      - `addNewAccounts` boolean: Can add new accounts
      - `subscribeAccounts` boolean: Can subscribe accounts
      - `manageNotifications` boolean: Can manage notifications
      - `exportUsageReport` boolean: Can export usage reports
    - `accountOperations` AccountOperationsDTO: Account-level backup operation permissions
      - `viewAccountSettingsPage` boolean: Can view the Account Settings page
      - `viewAccountBillingPage` boolean: Can view the Account Billing page
      - `viewSupportPage` boolean: Can view the Support page
      - `viewAccountActivity` boolean: Can view Account Activity
      - `viewAccountSecurityAuditPage` boolean: Can view the Account Security Audit page
      - `manageAccountNotifications` boolean: Can manage Account notifications
      - `viewBackupsPage` boolean: Can view the Backups page
      - `activateNewBackupTasks` boolean: Can activate new backup tasks
      - `modifyBackupTasks` boolean: Can modify existing backup tasks
      - `deleteBackupTasks` boolean: Can delete backup tasks
      - `pauseBackupTasks` boolean: Can pause backup tasks
      - `executeBackupTasks` boolean: Can execute (run now) backup tasks
      - `cancelBackupTasks` boolean: Can cancel running backup tasks
      - `viewBackupTasks` boolean: Can view backup tasks
      - `previewBackedUpData` boolean: Can preview backed-up data
      - `restoreBackups` boolean: Can restore backups
      - `exportBackups` boolean: Can export backups
      - `deleteBackupItemsGDPR` boolean: Can delete backup items under GDPR requests
    - `enabledServices` EnabledServicesDTO: Cloud services enabled for the user
      - `exchange` boolean: Microsoft Exchange backup enabled
      - `msGroupsTeams` boolean: Microsoft Groups & Teams backup enabled
      - `sharepoint` boolean: Microsoft SharePoint backup enabled
      - `onedrive` boolean: Microsoft OneDrive backup enabled
      - `salesforce` boolean: Salesforce backup enabled
      - `dropbox` boolean: Dropbox backup enabled
      - `box` boolean: Box backup enabled
      - `googleWorkspace` boolean: Google Workspace backup enabled
      - `googleSharedDrives` boolean: Google Shared Drives backup enabled
  - `accessibleAccounts` AccessibleAccountsDTO, required: Defines the set of accounts the user is allowed to access
    - `accessType` string, required: Access type. Use 'custom' to restrict access to the listed accountIds, or 'all' to grant access to all accounts
    - `accountIds` string[]: List of account UUIDs the user can access (relevant when accessType is 'custom')

## Response `200`

Successful retrieval of the information.

- PartnerUserView: Created secondary partner user details
  - `id` string: Unique internal ID of the secondary user
  - `email` string: Email address of the secondary user
  - `role` string: Role assigned to the secondary user
  - `partnerId` string: Partner ID of the distributor or reseller this user belongs to
  - `accessibleAccounts` string: Accessible accounts for the secondary user, can be all or custom

## Other responses

- `401`: The user is not logged in.
- `403`: The user does not have an access to view the account activity.

---

[API](https://skmtc.dev/cloudally/apis/cloudally-rest-api.md) - [All operations](https://skmtc.dev/cloudally/apis/cloudally-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cloudally/apis/cloudally-rest-api/revisions/97e3a3740b5b?raw)