---
title: "Send an invite to an email address to create an employer user"
method: POST
path: "/v2/providers/employers/{employerId}/users/invite"
tags: ["Employer user"]
---

# Send an invite to an email address to create an employer user

`POST /v2/providers/employers/{employerId}/users/invite`

## Request

- Base URL: `https://api.loket.nl`
- URL: `https://api.loket.nl/v2/providers/employers/{employerId}/users/invite`
- Auth: none required

__Activity name :__ PostInviteEmployerUserByEmployerId

__Metadata :__  Possible options for fields of the type 'metadata' can be acquired via /v2/providers/employers/{employerId}/users/metadata

__Defaults :__ Default values for a new object can be acquired by via /v2/providers/employers/{employerId}/users/defaults

Send an invite to an user for an employer user.

## Path parameters

- `employerId` string, uuid, required

## Headers

- `Authorization` string, required
- `Accept` string, required

## Request body

- UserInvite
  - `personalDetails` object
    - `initials` string: The initials of the user
    - `prefix` string, nullable: The prefix of the user
    - `lastName` string: The last name of the user
  - `contactInformation` ContactInformation4
    - `placeOfEmployment` string, nullable: The place of employment (standplaats) for the user.
    - `phoneNumber` string, nullable: The phone number of the user.
    - `emailAddress` string: The e-mail address of the user.
  - `twoFactorAuthenticationRequired` boolean: Indicates whether two factor authentication is required for the user. This setting is only available for login method: Via website en SSO
  - `hasAccessToPayrollingTestData` boolean: Indicates if the user has access to data for payrolling test years
  - `destinationForSecret` string: The destination phonenumber to sent the secret to during registration.

## Response `201`

Created

- object: a warning indacateds that the given payload is valide, however take notice of the warning this might ifluence behavour.
  - `version` Version
    - `obsoleteDate` string, date, nullable: The date (can be null) on which the `resourceVersion` is no longer supported/available
    - `resourceVersion` string, date: The resource version of the object in the response
  - `messages` object[]
    - `type` string: Indication of the type of message. See [the general documentation for more information](./#section/Response/Messages)
    - `description` string: Describes the message
    - `id` string, uuid, nullable: In some cases when the message may relate to a specific entity, or specific group of entities, this field provides the identifier of that entity
    - `code` integer: Identifying code for the message
    - `properties` string[]: An array that can contain additional information
  - `content` UserGetAndPut2
    - `id` string, uuid: The unique identifier of an object (GUID/UUID)
    - `loginMethod` LoginMethod: The allowedlogin method for the user
      - `key` integer
      - `value` string
    - `personalDetails` object
      - `firstName` string, nullable: The first name of the user
      - `initials` string: The initials of the user
      - `prefix` string, nullable: The prefix of the user
      - `lastName` string: The last name of the user
    - `contactInformation` ContactInformation4
      - `placeOfEmployment` string, nullable: The place of employment (standplaats) for the user.
      - `phoneNumber` string, nullable: The phone number of the user.
      - `emailAddress` string: The e-mail address of the user.
    - `userSpecifiedRole` UserSpecifiedRole, nullable: The Role which the user has specified.
      - `key` integer
      - `value` string
    - `userCustomSpecifiedRole` string, nullable: Further specification of the user role.
    - `hasAccessToPayrollingTestData` boolean: Indicates if the user has access to data for payrolling test years
    - `accessStatus` AccessStatus: indicates the access status of the user.
      - `key` integer
      - `value` string
    - `hasMultiFactorAuthentication` boolean: Indicates if the user has multi factor authentication enabled Can only be changed from true to false.
    - `twoFactorAuthenticationRequired` boolean: Indicates whether two factor authentication is required for the user. This setting is only available for login method: Via website en SSO
    - `azureActiveDirectory` AzureActiveDirectory2, nullable
      - `tenant` object: The Azure AD tennant
        - `id` string, uuid: Id for the tennant
        - `description` string
        - `tenantRegistrationLevel` 'provider' | 'employer'
      - `userId` string: The userId as known in the Azure AD of the selected tennant
    - `userName` string, nullable: The username
    - `isDepartmentManager` boolean: Indicates if the user is a department manager
    - `isLinkedToMultipleEmployers` boolean: Indicates if the user has access to multiple employer.
    - `hasIntegrations` boolean: Indicates if the user has integrations with clients other that Loket. This means that another application can call the loket API using this user.
    - `hasConnectedApplications` boolean: Indicates if the user has connected applications.In this case a conection was made where loket can call the external softwares api to read and/or write data for that system.
    - `dateTimeLastLogin` string, date-time, nullable: The date on which the user loged in for the last time
    - `dateTimeCreation` string, date-time: The date on which the user was created

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error

---

[API](https://skmtc.dev/loket/apis/loket-api.md) - [All operations](https://skmtc.dev/loket/apis/loket-api/llms.txt) - [OpenAPI document](https://skmtc.dev/loket/apis/loket-api/revisions/32170564148f?raw)