Create Account User
Beta/v1/identity/account-usersIdempotent with Idempotency-Key header. Learn more
Adds a user to the target account.
If no user with the given email or username exists, a new user is created and sent a welcome email containing a generated password. If a matching user already exists, that user is added to the account instead.
include[]optional arrayenumValues:userroledepartmentSub-objects to expand in the response. When omitted, sub-objects are returned as null.
nameoptional stringUser display name.
emailoptional stringUser email address.
Either email or username must be provided. If a user with this email already exists, that user is added to the account instead of a new user being created.
usernameoptional stringUnique username.
3–255 characters; letters, numbers, underscores, and hyphens. Either email or username must be provided. Providing a username without an email creates a scanning station user.
passwordoptional stringPassword for scanning station users.
Required when creating a scanning station user (username without email) and rejected for all other users, who instead receive a generated password in their welcome email. Must be 8–72 characters and include an uppercase letter, a lowercase letter, a number, and a special character.
role_idoptional stringID of the role to assign to the user.
Ignored for scanning station users, which are always assigned the scanner role.
department_idoptional stringID of the department to assign to the user.
preferencesoptional array of objectNotification preference toggles for the new user.
Only applies when creating a user in another account you manage (cross-account); ignored when creating a user in your own account.
notification_typestringenumValues:invoiceorder_acknowledgementpurchase_order_submissionNotification type.
enabledbooleanWhether this notification type is enabled for the account user.
idstringAccount user ID.
userobjectExpandablenullableUnderlying user.
idstringUser ID.
objectstringenumValues:userResource type identifier.
emailstringnullableEmail address.
namestringnullableUser's full display name.
usernamestringnullableUsername.
email_verified_atstring (date-time)nullableWhen the user verified their email address.
image_urlstringnullableURL of the user's profile image.
created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last updated timestamp.
objectstringenumValues:account_userResource type identifier.
statusstringenumValues:activedisabledremovedAccount user status.
active: the user can access the account.disabled: the user is locked out of the account.removed: the user has been removed (soft-deleted) from the account.
roleobjectExpandablenullableAssigned role.
idstringRole ID.
objectstringenumValues:roleResource type identifier.
namestringDisplay name, unique within the account.
typestringenumValues:adminuserscannerThe kind of role.
The role's type is sometimes used to gate special behaviors and to restrict some actions to only certain types of roles. For example, only roles with the type admin can create and manage API keys.
admin: full administrative access, including managing API keys.user: a custom role tailored to a specific need (its permissions are defined explicitly). Roles created through the API always have this type.scanner: a role for scanning-station operators.sales_rep: a role for sales representatives.agent: a role assigned to an automated agent rather than a person.
ownerobjectnullableProvenance of this role.
System-owned roles are global defaults shared across all accounts and cannot be modified or deleted; account-owned roles are custom roles created by that account.
null in this endpoint.permissionsarray of stringnullablePermissions granted by this role, in {domain}:{action} format, such as customers:read.
created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last updated timestamp.
departmentobjectExpandablenullableAssigned department.
idstringDepartment ID.
objectstringenumValues:departmentResource type identifier.
namestringDisplay name of the department.
Unique within the account.
notesstringnullableFree-form notes about the department.
locationobjectnullableThe storage location where this department operates.
null in this endpoint.scanning_stationsobjectnullableScanning stations in this department.
null in this endpoint.machinesobjectnullableMachines in this department.
null in this endpoint.created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last update timestamp.
last_used_atstring (date-time)nullableWhen the user last accessed this account.
created_atstring (date-time)When the account user was created.
updated_atstring (date-time)When the account user was last updated.
Responses
Successful response for Create Account User