---
title: "POST /v1/{+parent}/memberships"
method: POST
path: "/v1/{+parent}/memberships"
tags: ["groups"]
---

# POST /v1/{+parent}/memberships

`POST /v1/{+parent}/memberships`

Creates a `Membership`.

## Path parameters

- `parent` string, required

## Request body

- Membership — A membership within the Cloud Identity Groups API. A `Membership` defines a relationship between a `Group` and an entity belonging to that `Group`, referred to as a "member".
  - `type` 'TYPE_UNSPECIFIED' | 'USER' | 'SERVICE_ACCOUNT' | 'GROUP' | 'SHARED_DRIVE' | 'CBCM_BROWSER' | 'CHROME_OS_DEVICE' | 'OTHER' — Output only. The type of the membership.
  - `deliverySetting` 'DELIVERY_SETTING_UNSPECIFIED' | 'ALL_MAIL' | 'DIGEST' | 'DAILY' | 'NONE' | 'DISABLED' — Output only. Delivery setting associated with the membership.
  - `createTime` string, google-datetime — Output only. The time when the `Membership` was created.
  - `roles` MembershipRole[] — The `MembershipRole`s that apply to the `Membership`. If unspecified, defaults to a single `MembershipRole` with `name` `MEMBER`. Must not contain duplicate `MembershipRole`s with the same `name`.
    - `name` string — The name of the `MembershipRole`. Must be one of `OWNER`, `MANAGER`, `MEMBER`.
    - `expiryDetail` ExpiryDetail — The `MembershipRole` expiry details.
      - `expireTime` string, google-datetime — The time at which the `MembershipRole` will expire.
    - `restrictionEvaluations` RestrictionEvaluations — Evaluations of restrictions applied to parent group on this membership.
      - `memberRestrictionEvaluation` MembershipRoleRestrictionEvaluation — The evaluated state of this restriction.
        - `state` 'STATE_UNSPECIFIED' | 'COMPLIANT' | 'FORWARD_COMPLIANT' | 'NON_COMPLIANT' | 'EVALUATING' — Output only. The current state of the restriction
  - `updateTime` string, google-datetime — Output only. The time when the `Membership` was last updated.
  - `name` string — Output only. The [resource name](https://cloud.google.com/apis/design/resource_names) of the `Membership`. Shall be of the form `groups/{group}/memberships/{membership}`.
  - `preferredMemberKey` EntityKey — A unique identifier for an entity in the Cloud Identity Groups API. An entity can represent either a group with an optional `namespace` or a user without a `namespace`. The combination of `id` and `namespace` must be unique; however, the same `id` can be used with different `namespace`s.
    - `id` string — The ID of the entity. For Google-managed entities, the `id` should be the email address of an existing group or user. Email addresses need to adhere to [name guidelines for users and groups](https://support.google.com/a/answer/9193374). For external-identity-mapped entities, the `id` must be a string conforming to the Identity Source's requirements. Must be unique within a `namespace`.
    - `namespace` string — The namespace in which the entity exists. If not specified, the `EntityKey` represents a Google-managed entity such as a Google user or a Google Group. If specified, the `EntityKey` represents an external-identity-mapped group. The namespace must correspond to an identity source created in Admin Console and must be in the form of `identitysources/{identity_source}`.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudidentity.md) · [All operations](https://skmtc.net/google/apis/cloudidentity/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudidentity/versions/179b4eeed5a2/schema)