---
title: "POST /api/v1/cert-manager/signers/{signerId}/identities"
method: POST
path: "/api/v1/cert-manager/signers/{signerId}/identities"
tags: ["PKI Signers"]
---

# POST /api/v1/cert-manager/signers/{signerId}/identities

`POST /api/v1/cert-manager/signers/{signerId}/identities`

Add a machine identity to a signer

## Path parameters

- `signerId` string, uuid, required

## Request body

- object
  - `identityId` string, uuid, required
  - `role` 'admin' | 'operator' | 'auditor'

## Response `200`

Default Response

- object
  - `membershipId` string, uuid, required
  - `signerId` string, uuid, required
  - `actorUserId` string, uuid, nullable
  - `actorIdentityId` string, uuid, nullable
  - `actorGroupId` string, uuid, nullable
  - `role` string, required
  - `customRoleId` string, uuid, nullable
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `details` object, nullable
    - `name` string, nullable, required
    - `email` string, nullable
    - `username` string, nullable
    - `authMethod` string, nullable
    - `slug` string, nullable

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/885aef3e6c11/schema)