---
title: "Create authorized user"
method: POST
path: "/authorized_users"
tags: ["Authorized users"]
---

# Create authorized user

`POST /authorized_users`

Add a new authorized user to a company.

Required permissions:
 - `authorized_user:create`
 - `member:email:read`

## Request body

- object — Parameters for CreateAuthorizedUser
  - `company_id` string, required — The ID of the company to add the authorized user to.
  - `elevation` object, nullable — Re-authentication proof required to perform this sensitive action.
    - `authenticator_data` string, nullable — The WebAuthn authenticator data (base64).
    - `client_data_json` string, nullable — The WebAuthn client data JSON (base64).
    - `credential_id` string, nullable — The WebAuthn credential ID (base64).
    - `email_code` string, nullable — The 6-digit code emailed to the user.
    - `signature` string, nullable — The WebAuthn signature (base64).
    - `totp_code` string, nullable — The 6-digit code from the authenticator app or SMS.
    - `use_finance_session` boolean, nullable — Reuse an existing elevated session (for SMS/email 2FA users).
  - `role` 'owner' | 'admin' | 'sales_manager' | 'moderator' | 'advertiser' | 'app_manager' | 'support' | 'manager' | 'custom', required — Possible roles an authorized user can have
  - `send_emails` boolean, nullable — Whether to send notification emails to the user on creation.
  - `user_id` string, required — The ID of the user to add as an authorized user.

## Response `200`

A successful response

- AuthorizedUser — A user who has been granted administrative access to manage a company's dashboard and settings.
  - `company` object, required — The company this authorized user has access to.
    - `id` string, required — The unique identifier for the company.
    - `title` string, required — The display name of the company shown to customers.
  - `id` string, required — The unique identifier for the authorized user.
  - `role` 'owner' | 'admin' | 'sales_manager' | 'moderator' | 'advertiser' | 'app_manager' | 'support' | 'manager' | 'custom', required — Possible roles an authorized user can have
  - `user` object, required — The user account linked to this authorized user record.
    - `email` string, nullable, required — The user's email address. Requires the member:email:read permission to access. Null if not authorized.
    - `id` string, required — The unique identifier for the user.
    - `name` string, nullable, required — The user's display name shown on their public profile.
    - `username` string, required — The user's unique username shown on their public profile.

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `422` — Verification required
- `429` — Too many requests
- `500` — Internal server error

---

[API](https://skmtc.net/whop/apis/whop-api.md) · [All operations](https://skmtc.net/whop/apis/whop-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/whop/whop-api/versions/db0883548bc5/schema)