---
title: "POST /api/v1/agent-vault/members"
method: POST
path: "/api/v1/agent-vault/members"
tags: ["Agent Vault Members"]
---

# POST /api/v1/agent-vault/members

`POST /api/v1/agent-vault/members`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/agent-vault/members`
- Auth: none declared

Give users, groups and machine identities access to Agent Vault, by id or by email

## Request body

- object
  - `userIds` string[]: The IDs of the users to act on.
  - `machineIdentityIds` string[]: The IDs of the machine identities to act on.
  - `groupIds` string[]: The IDs of the groups to act on.
  - `emails` string[]: The email addresses of the users to give access to. Each must already be in the organization.
  - `role` 'admin' | 'member', required: The Agent Vault role: admin or member.

## Response `200`

Default Response

- object
  - `members` union[], required
    - union
      - object
        - `type` 'user', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `role` string, required: The Agent Vault role: admin or member.
        - `addedAt` string, date-time, required: When the member was added to Agent Vault.
      - object
        - `type` 'machineIdentity', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `role` string, required: The Agent Vault role: admin or member.
        - `addedAt` string, date-time, required: When the member was added to Agent Vault.
      - object
        - `type` 'group', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `role` string, required: The Agent Vault role: admin or member.
        - `addedAt` string, date-time, required: When the member was added to Agent Vault.
  - `skipped` union[], required: The requested members who already had access to Agent Vault and were left as they were.
    - union
      - object
        - `type` 'user', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `identifier` string, required: The ID or email address the request named, echoed back so a reply can be matched to it.
      - object
        - `type` 'machineIdentity', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `identifier` string, required: The ID or email address the request named, echoed back so a reply can be matched to it.
      - object
        - `type` 'group', required: Whether this member is a user, a machine identity or a group.
        - `id` string, uuid, required: The ID of the user, machine identity or group.
        - `identifier` string, required: The ID or email address the request named, echoed back so a reply can be matched to it.

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-10-12** `69b4d03fd736`: 5 breaking, 1 info
  - the `members/items/` response's property type changed from `object` to no type for status `200`
  - removed the required property `members/items/actor` from the response with the `200` status
  - removed the required property `members/items/createdAt` from the response with the `200` status
  - removed the required property `members/items/id` from the response with the `200` status
  - …2 more
- **2026-09-22** `62b0ba9edfe9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/agent-vault/members/post.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/25b4ec6ff850?raw)