---
title: "Create new user"
method: POST
path: "/users"
tags: ["organizations", "users"]
---

# Create new user

`POST /users`

Creates a Chronograf user in the store

## Request body

- User — A Chronograf user with role-based access-control to an organization's resources.
  - `id` string, required — Unique identifier representing a user resource
  - `links` object
    - `self` string, url — Self link mapping to this resource
  - `name` string, required — Username (as taken from principal given by auth provider)
  - `provider` string, required — OAuth provider used to authenticate
  - `roles` Role[], required
    - `name` 'member' | 'viewer' | 'editor' | 'admin' — A Chronograf user's role within an organization.
    - `organization` string — Name of organization user belongs to
  - `scheme` string, required — Scheme used to authenticate (only OAuth2 currently supported)
  - `superAdmin` boolean — If user has the ability to perform CRUD operations on Organizations, across Organizations, and on other SuperAdmin users

## Response `201`

User successfully created

- User — A Chronograf user with role-based access-control to an organization's resources.
  - `id` string, required — Unique identifier representing a user resource
  - `links` object
    - `self` string, url — Self link mapping to this resource
  - `name` string, required — Username (as taken from principal given by auth provider)
  - `provider` string, required — OAuth provider used to authenticate
  - `roles` Role[], required
    - `name` 'member' | 'viewer' | 'editor' | 'admin' — A Chronograf user's role within an organization.
    - `organization` string — Name of organization user belongs to
  - `scheme` string, required — Scheme used to authenticate (only OAuth2 currently supported)
  - `superAdmin` boolean — If user has the ability to perform CRUD operations on Organizations, across Organizations, and on other SuperAdmin users

## Other responses

- `400` — Invalid JSON – unable to encode or decode; or failed to perform operation in data store
- `401` — Unauthorized to perform this operation
- `403` — Forbidden to access this route
- `422` — Invalid data schema provided to server for user
- `default` — Internal server error

---

[API](https://skmtc.net/influxdata/apis/chronograf.md) · [All operations](https://skmtc.net/influxdata/apis/chronograf/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/influxdata/chronograf/revisions/ce55d963b4ac/schema)