---
title: "Create a user or API user"
method: POST
path: "/restapi/json/v1/user"
tags: ["Users"]
---

# Create a user or API user

`POST /restapi/json/v1/user`

## Request

- Base URL: `https://Hostname:Port`
- URL: `https://Hostname:Port/restapi/json/v1/user`
- Auth: API key in header `AUTHTOKEN`
- TypeScript: <https://skmtc.dev/manageengine/apis/pam360-rest-api/docs/restapi/json/v1/user/post.ts> (a function with typed inputs; its response is checked against the schema)

JSON with: FIRSTNAME (required), LASTNAME (required), USERNAME (required), EMAIL (required).

This operation creates a new API user in PAM360 with details like username, role, department, location, and access options.

## Headers

- `orgName` string

## Request body `application/x-www-form-urlencoded`

- CreateApiUserRequest
  - `operation` object
    - `Details` object
      - `FIRSTNAME` string, required: User's first name
      - `LASTNAME` string, required: User's last name
      - `USERNAME` string, required: Unique username for the user
      - `EMAIL` string, email, required: Primary email address
      - `SECONDARYEMAILID` string, email: Alternate email address
      - `ROLE` string: Role assigned to the user
      - `ROLEID` integer: Numeric role identifier
      - `DEPARTMENT` string: Department the user belongs to
      - `LOCATION` string: Physical work location
      - `USERGROUPNAME` string: User group to assign the user to
      - `ISSUPERADMIN` boolean: Whether the user has super admin privileges
      - `WEBACCESS` boolean: Enables PAM360 web access for the user
      - `RESTAPIACCESS` boolean: Enables REST API access for the user
      - `SDKACCESS` boolean: Enables SDK access for the user
      - `ENABLEMOBILEACCESS` boolean: Enables mobile access for the user
      - `ENABLEADDONACCESS` boolean: Enables browser extension access for the user
      - `REMOTECONNECTACCESS` boolean: Enables remote connection access for the user
      - `REMOTECONNECTVIASSHPROXY` boolean: Enables SSH proxy-based remote connection
      - `LANGUAGECODE` string: UI language preference
      - `ENABLETWOFACTOR` boolean: Enables two-factor authentication for the user
      - `ISAPIUSER` boolean: Creates a strict REST API-only user (no web login)
      - `POLICY` string: Password policy to enforce for the user
      - `PASSWORD` string: Initial password. Auto-generated if omitted.
      - `RSAUSERNAME` string: RSA SecurID username
      - `RADIUSUSERNAME` string: RADIUS authentication username
      - `PHONEFACTOR_USERNAME` string: Phone-based MFA username
      - `DUOUSERNAME` string: Duo Security username
      - `PRIMARYCONTACT` string: Preferred communication method
      - `MOBILE_COUNTRYCODE` string: International dialing prefix for mobile
      - `MOBILE` string: Mobile phone number
      - `LANDLINE` string: Landline phone number
      - `LANDLINE_COUNTRYCODE` string: Country code for landline
      - `LANDLINE_EXT` string: Landline extension number
      - `OWNERNAMEOPTION` boolean: Allows the user to create resources for another user
      - `EXPIRYDATE` string: Account deactivation date (YYYY-MM-DD format)
      - `TOKENVALIDITYDAYS` integer: Validity period (in days) for authentication tokens
      - `HOSTCHECK` boolean: Enables hostname validation for API access
      - `HOSTNAME` string: Hostname from which the user can access PAM360

## Response `200`

User created

- UserCreateResponse
  - `operation` object
    - `name` string
    - `result` Result
      - `status` 'Success' | 'Failed'
      - `message` string
      - `statusCode` integer
    - `Details` object
      - `AUTHTOKEN` string
      - `USERID` integer

---

[API](https://skmtc.dev/manageengine/apis/pam360-rest-api.md) - [All operations](https://skmtc.dev/manageengine/apis/pam360-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/manageengine/apis/pam360-rest-api/revisions/44a47abb4bdb?raw)