---
title: "POST /v1/{+parent}/activeDirectories"
method: POST
path: "/v1/{+parent}/activeDirectories"
tags: ["projects"]
---

# POST /v1/{+parent}/activeDirectories

`POST /v1/{+parent}/activeDirectories`

CreateActiveDirectory Creates the active directory specified in the request.

## Path parameters

- `parent` string, required

## Query parameters

- `activeDirectoryId` string

## Request body

- ActiveDirectory — ActiveDirectory is the public representation of the active directory config.
  - `nfsUsersWithLdap` boolean — If enabled, will allow access to local users and LDAP users. If access is needed for only LDAP users, it has to be disabled.
  - `encryptDcConnections` boolean — If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.
  - `backupOperators` string[] — Optional. Users to be added to the Built-in Backup Operator active directory group.
  - `state` 'STATE_UNSPECIFIED' | 'CREATING' | 'READY' | 'UPDATING' | 'IN_USE' | 'DELETING' | 'ERROR' | 'DIAGNOSING' — Output only. The state of the AD.
  - `organizationalUnit` string — The Organizational Unit (OU) within the Windows Active Directory the user belongs to.
  - `aesEncryption` boolean — If enabled, AES encryption will be enabled for SMB communication.
  - `kdcIp` string — KDC server IP address for the active directory machine.
  - `createTime` string, google-datetime — Output only. Create time of the active directory.
  - `password` string — Required. Password of the Active Directory domain administrator.
  - `stateDetails` string — Output only. The state details of the Active Directory.
  - `domain` string — Required. Name of the Active Directory domain
  - `dns` string — Required. Comma separated list of DNS server IP addresses for the Active Directory domain.
  - `kdcHostname` string — Name of the active directory machine. This optional parameter is used only while creating kerberos volume
  - `name` string — Identifier. The resource name of the active directory. Format: `projects/{project_number}/locations/{location_id}/activeDirectories/{active_directory_id}`.
  - `site` string — The Active Directory site the service will limit Domain Controller discovery too.
  - `securityOperators` string[] — Optional. Domain users to be given the SeSecurityPrivilege.
  - `netBiosPrefix` string — Required. NetBIOSPrefix is used as a prefix for SMB server name.
  - `description` string — Description of the active directory.
  - `ldapSigning` boolean — Specifies whether or not the LDAP traffic needs to be signed.
  - `labels` object — Labels for the active directory.
  - `username` string — Required. Username of the Active Directory domain administrator.
  - `administrators` string[] — Optional. Users to be added to the Built-in Admininstrators group.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/netapp.md) · [All operations](https://skmtc.net/google/apis/netapp/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/netapp/versions/fa9ebea9e9dc/schema)