ClientService

Creates a new User and sends them an invitation to join the specified organization, unless `skip_invitation` is true.

post/v1alpha2/organizations/{organization}/users

Request

  • Base URL: https://api.thirdfort.dev/client/api
  • URL: https://api.thirdfort.dev/client/api/v1alpha2/organizations/{organization}/users
  • Auth: HTTP bearer

Path parameters

organizationstring required

The organization identifier of the resource path.

Query parameters

skipInvitationboolean

Optional. Skips Thirdfort's onboarding email and, on Auth0, the password reset. WorkOS organizations still receive a WorkOS invitation. Defaults to false: emails are sent.

Set true when the user is created only to attribute work, such as an on_behalf_of target.

Over REST this binds as the query parameter ?skipInvitation=true, not a body key.

Request body

namestring

The unique identifier for the User.

emailstring required

Required. The email address of the User. Must not already be in use by another user on the platform, including users in other organizations; creation fails if it is. This field is immutable after creation: UpdateUser rejects email in its update mask.

displayNamestring

Optional. The human readable name of the User. For a human user, this would be their full name. For other entities, this will be a descriptive name that can be used to identify them, such as "ACME Integrations Service Account".

state'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE' | 'INVITED' | 'DELETED'

The state of the User.

  • ACTIVE: The User is active and can interact with the API

  • INACTIVE: The User has been deactivated and cannot interact with the API

  • INVITED: The user has been invited but has not yet interacted with the API. They become ACTIVE when they first interact with the API.

  • DELETED: The User has been deleted and cannot interact with the API

lastSeenstring date-time

The last time the User interacted with the API.

authenticationProviderType'TYPE_UNSPECIFIED' | 'AUTH0' | 'WORKOS'
newNotificationRecipientstring

The User who inherited check notifications when this user was deleted.

deleteTimestring date-time

The time at which the User was soft-deleted.

groupMembershipsstring[]

List of Groups this User is a member of. Populated only for the current user, empty when viewing other users.

Response

A successful response.

namestring

The unique identifier for the User.

emailstring required

Required. The email address of the User. Must not already be in use by another user on the platform, including users in other organizations; creation fails if it is. This field is immutable after creation: UpdateUser rejects email in its update mask.

displayNamestring

Optional. The human readable name of the User. For a human user, this would be their full name. For other entities, this will be a descriptive name that can be used to identify them, such as "ACME Integrations Service Account".

state'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE' | 'INVITED' | 'DELETED'

The state of the User.

  • ACTIVE: The User is active and can interact with the API

  • INACTIVE: The User has been deactivated and cannot interact with the API

  • INVITED: The user has been invited but has not yet interacted with the API. They become ACTIVE when they first interact with the API.

  • DELETED: The User has been deleted and cannot interact with the API

lastSeenstring date-time

The last time the User interacted with the API.

authenticationProviderType'TYPE_UNSPECIFIED' | 'AUTH0' | 'WORKOS'
newNotificationRecipientstring

The User who inherited check notifications when this user was deleted.

deleteTimestring date-time

The time at which the User was soft-deleted.

groupMembershipsstring[]

List of Groups this User is a member of. Populated only for the current user, empty when viewing other users.

Changes