---
title: "Create a grant for a user"
method: POST
path: "/api/v1/iga/grants"
tags: ["accessManagement"]
---

# Create a grant for a user

`POST /api/v1/iga/grants`

Create an identity grant directly without going through the IGA workflow.
Requires user_id and entitlement_id. Optionally specify policy, granted_by, and granted_at.
The grant method is automatically derived from the entitlement's provisioning config.

## Headers

- `X-Api-Key` string, required
- `X-Workspace-Id` string

## Request body

- object
  - `user_id` integer, required — The ID of the user who will receive the grant
  - `entitlement_id` integer, required — The ID of the entitlement to grant
  - `policy_id` integer — Optional policy ID to associate with the grant
  - `policy_key` string — Optional policy key (alternative to policy_id)
  - `granted_by` integer — Optional user ID of who authorized this grant. Defaults to the API key owner.
  - `granted_at` string, date-time — Optional timestamp of when the grant was authorized. Defaults to current time.

## Response `200`

Successful response

- AccessManagementPostapiV1IgaGrantsResponse200 — Empty response body

---

[API](https://skmtc.net/atomicwork/apis/atomicwork-public-api.md) · [All operations](https://skmtc.net/atomicwork/apis/atomicwork-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/atomicwork/atomicwork-public-api/versions/2e7047b35062/schema)