---
title: "Add user"
source_url: https://dev.digicert.com/certcentral-apis/services-api/users/add-user.html
api_method: POST
api_endpoint: "/services/v2/user"
api_url: "https://www.digicert.com/services/v2/user"
---

**POST** `https://www.digicert.com/services/v2/user`

Use this endpoint to create a new user. To get available access roles, use the [List container roles](https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-container-roles.md) endpoint.


> **Info**
>
> By default, the user will be created in the same container as the user associated with the API key used with the request.


## Example requests and responses

**cURL**

```bash
curl -X POST \
  https://www.digicert.com/services/v2/user \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "first_name": "Jill",
    "last_name": "Valentine",
    "email": "jill.valentine@pd.racoon-city.gov",
    "telephone": "555-555-5555",
    "job_title": "S.T.A.R.S. Alpha Team",
    "username": "jill.valentine",
    "access_roles": [
        {
            "id": 5
        }
    ]
}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/services/v2/user"

payload = "{\n    \"first_name\": \"Jill\",\n    \"last_name\": \"Valentine\",\n    \"email\": \"jill.valentine@pd.racoon-city.gov\",\n    \"telephone\": \"555-555-5555\",\n    \"job_title\": \"S.T.A.R.S. Alpha Team\",\n    \"username\": \"jill.valentine\",\n    \"access_roles\": [\n        {\n            \"id\": 5\n        }\n    ]\n}"
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json"
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/services/v2/user"

	payload := strings.NewReader("{\n    \"first_name\": \"Jill\",\n    \"last_name\": \"Valentine\",\n    \"email\": \"jill.valentine@pd.racoon-city.gov\",\n    \"telephone\": \"555-555-5555\",\n    \"job_title\": \"S.T.A.R.S. Alpha Team\",\n    \"username\": \"jill.valentine\",\n    \"access_roles\": [\n        {\n            \"id\": 5\n        }\n    ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'POST',
  url: 'https://www.digicert.com/services/v2/user',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' },
  body: 
   { first_name: 'Jill',
     last_name: 'Valentine',
     email: 'jill.valentine@pd.racoon-city.gov',
     telephone: '555-555-5555',
     job_title: 'S.T.A.R.S. Alpha Team',
     username: 'jill.valentine',
     access_roles: [ { id: 5 } ] },
  json: true };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 201 Created

```json
{
    "id": 1538858
}
```

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>username</td>
<td>required</td>
<td>string</td>
<td>Username for the profile.<br>Valid characters:a–z, A–Z, 0–9, @, -, _, +, .</td>
</tr>
<tr>
<td>first_name</td>
<td>required</td>
<td>string</td>
<td>First name of the user.<br>Character limit: 128</td>
</tr>
<tr>
<td>last_name</td>
<td>required</td>
<td>string</td>
<td>Last name of the user.<br>Character limit: 128</td>
</tr>
<tr>
<td>email</td>
<td>required</td>
<td>string</td>
<td>Email address of the user. Accepts only valid email addresses.<br>Character limit: 255</td>
</tr>
<tr>
<td>job_title</td>
<td>optional</td>
<td>string</td>
<td>Job title of the user. Required for user to be an EV approver.<br>Character limit: 64</td>
</tr>
<tr>
<td>telephone</td>
<td>optional</td>
<td>string</td>
<td>Telephone number of the user. Required for user to be an EV approver.<br>Character limit: 64</td>
</tr>
<tr>
<td>container</td>
<td>optional</td>
<td>object</td>
<td>Details of the user container.<br><strong>Note:</strong> The <code>container</code> request parameter exists for a legacy use case. To restrict a user's access to one or more divisions, use the <code>container_id_assignments</code> array, instead.</td>
</tr>
<tr>
<td>.. id</td>
<td>optional</td>
<td>int</td>
<td>ID of the container the user will be created under.</td>
</tr>
<tr>
<td>access_roles</td>
<td>required</td>
<td>array</td>
<td>Container for access role ID.</td>
</tr>
<tr>
<td>.. id</td>
<td>required</td>
<td>int</td>
<td>ID of the access role to assign the user.<br>See Glossary – Access roles.</td>
</tr>
<tr>
<td>container_id_assignments</td>
<td>required</td>
<td>array</td>
<td>List of container IDs (divisions) the user will be assigned to. If set, this will override any default containers the user can view.</td>
</tr>
<tr>
<td>is_saml_sso_only</td>
<td>optional</td>
<td>bool</td>
<td>If <code>true</code>, the user can only log in to CertCentral via SAML SSO.<br>Default:
false</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>id</td>
<td>int</td>
<td>ID of the created user.</td>
</tr>
</tbody>
</table>