---
title: "POST /v2/domains/{domainIdentifier}/user-profiles"
method: POST
path: "/v2/domains/{domainIdentifier}/user-profiles"
---

# POST /v2/domains/{domainIdentifier}/user-profiles

`POST /v2/domains/{domainIdentifier}/user-profiles`

Creates a user profile in Amazon DataZone.

## Path parameters

- `domainIdentifier` string, required

## Request body

- object
  - `userIdentifier` string, required — The identifier of the user for which the user profile is created.
  - `userType` 'IAM_USER' | 'IAM_ROLE' | 'SSO_USER' | 'IAM_ROLE_SESSION' — The user type of the user for which the user profile is created.
  - `sessionName` string — The session name for IAM role sessions.
  - `clientToken` string — A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.

## Response `201`

Success

- CreateUserProfileOutput
  - `domainId` string — The identifier of the Amazon DataZone domain in which a user profile is created.
  - `id` string — The identifier of the user profile.
  - `type` 'IAM' | 'SSO' — The type of the user profile.
  - `status` 'ASSIGNED' | 'NOT_ASSIGNED' | 'ACTIVATED' | 'DEACTIVATED' — The status of the user profile.
  - `details` object — The user profile details.
    - `iam` object — The IAM details of the user profile.
      - `arn` string — The ARN of the IAM user.
      - `principalId` string — The principal ID as part of the IAM user profile details.
      - `sessionName` string — The session name for IAM role sessions.
      - `groupProfileId` string — The identifier of the group profile associated with the IAM user profile. This links the user to a specific group profile within the Amazon DataZone domain.
    - `sso` object — The SSO details of the user profile.
      - `username` string, password — The username as part of the SSO user profile detail.
      - `firstName` string, password — The first name as part of the SSO user profile detail.
      - `lastName` string, password — The last name as part of the SSO user profile detail.

## Other responses

- `480` — InternalServerException
- `481` — ResourceNotFoundException
- `482` — AccessDeniedException
- `483` — ThrottlingException
- `484` — ValidationException
- `485` — UnauthorizedException

---

[API](https://skmtc.net/aws/apis/datazone.md) · [All operations](https://skmtc.net/aws/apis/datazone/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/datazone/versions/055599054b53/schema)