---
title: "Create User"
method: POST
path: "/api/scim/v2/Users"
tags: ["Users V2"]
---

# Create User

`POST /api/scim/v2/Users`

Use this API to create a user and associate that user with the configured organization and role. This API should only be used when provisioning and managing users from your Identity Provider using the System for Cross-Domain Identity Management (SCIM) standard to facilitate the automated creation of user identities from a third-party identity management application.

> 🗒 Things to Know
>
> - This API supports OneTrust's Legacy SCIM Integration that leverages SCIM groups, which are unique role-organization combinations that each represent a specific role within a particular organization. For more information, see [Legacy SCIM User Provisioning](https://my.onetrust.com/s/article/UUID-abda73a7-4996-c1b4-2e2a-e46aa3f2a3cc).
> - If a value is not provided for `roles` or `organization` in the request, the newly created user will be assigned the default role and organization as configured on the **User Provisioning** screen within **Global Settings** in the OneTrust application.
> - This API supports assigning the user to multiple roles within one organization. If the user should be assigned to other role-organization combinations (SCIM groups), use the [Modify Group Members](https://developer.onetrust.com/onetrust/reference/updategroupmembersusingpatch) API.

## Request body

- UserResource
  - `id` string, uuid — Unique identifier for the user created by the OneTrust application.
  - `externalId` string — External Id
  - `meta` Meta
    - `created` string, date-time — The date and time when the resource was created
    - `lastModified` string, date-time — The date and time when the resource was last modified
    - `location` string, uri — The URL for the resource
    - `version` string — The version of the resource
    - `attributes` unknown[]
      - unknown
    - `resourceType` 'User' | 'Group' | 'ResourceType' | 'ServiceProviderConfig' | 'Schema' — The resource type
  - `schemas` string[]
  - `userName` string, email — Username of the user in the OneTrust application.
  - `name` Name, required
    - `familyName` string — Family name (last name) of the user.
    - `givenName` string — Given name (first name) of the user.
  - `userType` 'Internal' | 'External' — Type of the user.
  - `active` boolean — The flag to check whether the user is an active or an inactive user.
  - `groups` UserGroup[]
    - `value` string — Unique identifier of a group in the application.
    - `display` string — Name of the User Group in the application.
  - `emails` Email[]
    - `value` string, email, required — Email of the user.
    - `display` string, email — Email of the user.
    - `primary` boolean — Is the email the user's primary. Always `true` in the OneTrust application.
    - `$ref` string, string — Reference for the attribute
    - `type` string — The type of the email. In the OneTrust application, type is always 'work'.
  - `roles` string[]
  - `title` string — Job title of the user
  - `urn:ietf:params:scim:schemas:extension:enterprise:2.0:User` EnterpriseUser
    - `businessUnit` string — User's business unit.
    - `division` string — The division with which the user is associated.
    - `employeeNumber` string — User's employee number or ID.
    - `officeLocation` string — The office location of the user.
    - `department` string — The department with which the user is associated.
    - `manager` Manager
      - `value` string, required — The manager's GUID or `id` in the OneTrust application. Leverage the [Get List of Users](/onetrust/reference/getusers) API to obtain a list of users. Use the manager's `id` to populate `value`.
      - `displayName` string — Manager's full name in the application.
      - `$ref` string, url — Reference URL to the user
    - `organization` string — Organization of the user within the OneTrust application.
    - `legacyManager` string — The legacy manager of the user.

## Response `201`

Created

- UserResource
  - `id` string, uuid — Unique identifier for the user created by the OneTrust application.
  - `externalId` string — External Id
  - `meta` Meta
    - `created` string, date-time — The date and time when the resource was created
    - `lastModified` string, date-time — The date and time when the resource was last modified
    - `location` string, uri — The URL for the resource
    - `version` string — The version of the resource
    - `attributes` unknown[]
      - unknown
    - `resourceType` 'User' | 'Group' | 'ResourceType' | 'ServiceProviderConfig' | 'Schema' — The resource type
  - `schemas` string[]
  - `userName` string, email — Username of the user in the OneTrust application.
  - `name` Name, required
    - `familyName` string — Family name (last name) of the user.
    - `givenName` string — Given name (first name) of the user.
  - `userType` 'Internal' | 'External' — Type of the user.
  - `active` boolean — The flag to check whether the user is an active or an inactive user.
  - `groups` UserGroup[]
    - `value` string — Unique identifier of a group in the application.
    - `display` string — Name of the User Group in the application.
  - `emails` Email[]
    - `value` string, email, required — Email of the user.
    - `display` string, email — Email of the user.
    - `primary` boolean — Is the email the user's primary. Always `true` in the OneTrust application.
    - `$ref` string, string — Reference for the attribute
    - `type` string — The type of the email. In the OneTrust application, type is always 'work'.
  - `roles` string[]
  - `title` string — Job title of the user
  - `urn:ietf:params:scim:schemas:extension:enterprise:2.0:User` EnterpriseUser
    - `businessUnit` string — User's business unit.
    - `division` string — The division with which the user is associated.
    - `employeeNumber` string — User's employee number or ID.
    - `officeLocation` string — The office location of the user.
    - `department` string — The department with which the user is associated.
    - `manager` Manager
      - `value` string, required — The manager's GUID or `id` in the OneTrust application. Leverage the [Get List of Users](/onetrust/reference/getusers) API to obtain a list of users. Use the manager's `id` to populate `value`.
      - `displayName` string — Manager's full name in the application.
      - `$ref` string, url — Reference URL to the user
    - `organization` string — Organization of the user within the OneTrust application.
    - `legacyManager` string — The legacy manager of the user.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/versions/21de3aa0b170/schema)