---
title: "Add service user"
source_url: https://dev.digicert.com/certcentral-apis/services-api/users/add-service-user.html
api_method: POST
api_endpoint: "/services/v2/user"
api_url: "https://www.digicert.com/services/v2/user"
---

**POST** `https://www.digicert.com/services/v2/user`

Use this endpoint to create a new service user with an API key. To create additional API keys for the same service user, see the [Create key](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/create-key.md) endpoint.


> **Warning**
>
> The API key is shown only this one time in the creation response. It will never be shown again and there is no way to retrieve it if lost.


## What is service user

A service user has API-only access to your CertCentral account. Only administrators can create servicer users. When creating a service user, you link the administrator's permissions to the key.

By default, the service user is authorized to perform any actions the administrator can.

## Example requests and responses

## cURL

```bash
curl -X POST \  
  'https://www.digicert.com/services/v2/user' \  
  -H 'Content-Type: application/json' \  
  -H 'X-DC-DEVKEY: {{api_key}}' \  
  -d '{
    "is_api_only": true,    
    "email": "jane.doe@pd.racoon-city.gov",    
    "api_name": "API Key Name",    
    "restricted_to_role_id": 100,    
    " container_id_assignments": [
         12345,
         12346
    ]
}'
```

## 201 Created

```
{
  "id": 1538858,  
  "api_key": "Aqdgb0p5U153195f22s6pw5cj0mfvp06xg89xw0xhh3zhc2"
}
```

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>is_api_only</td>
<td>required</td>
<td>boolean</td>
<td>If true, the request creates a new service user and returns an API key.</td>
</tr>
<tr>
<td>email</td>
<td>required</td>
<td>string</td>
<td>Email address to link to this service user. Some of our processes require the user associated with the API key to have an email address.<br>Accepts only valid email addresses.<br><strong>Character limit:</strong> 255</td>
</tr>
<tr>
<td>api_name</td>
<td>required</td>
<td>string</td>
<td>Name of the key.</td>
</tr>
<tr>
<td>restricted_to_role_id</td>
<td>optional</td>
<td>int</td>
<td>To limit API key permissions, specify the API access role ID.<br><strong>Allowed valued:</strong> <code>0</code>, <code>100</code>, <code>101</code>, <code>102</code>, <code>103</code>. For more information, see <a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md">Glossary - API key roles</a>.</td>
</tr>
<tr>
<td>container_id_assignments</td>
<td>optional</td>
<td>array</td>
<td>List of container IDs (divisions) the service user will be assigned to. If set, this will override any default containers the service user can view.<br>By default, the service user has the same division access as the administrator creating the service user. After creating the service user, you can use the <a href="https://dev.digicert.com/md/certcentral-apis/services-api/containers/update-user-assignments.md">Update user assignments</a> endpoint to update the service user's container assignments.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>id</td>
<td>int</td>
<td>ID of the created service user.</td>
</tr>
<tr>
<td>api_key</td>
<td>string</td>
<td>Randomly generated API key.</td>
</tr>
</tbody>
</table>