System Admin

Create a new user (SystemAdmin)

Provision a new local user account (SystemAdmin only). When password is omitted or null, a cryptographically random password is generated (OIDC-style crypto/rand + base64url) and returned once in the response body. Any provided value, including empty string, is policy-checked. Tenant provisioning follows the shared auth.default_tenant_mode policy.

post/system/admin/users/create

Request body

emailstring required
passwordstring
usernamestring required

Response

Identity already exists, returns the existing user

generated_passwordstring

GeneratedPassword is the plaintext password when the server auto-generated one. Absent when the caller supplied the password.

Changes