Each user is uniquely identified by email, user_id, and a role. Users authenticate with either a password or Single Sign-On (SSO).
If SSO is enabled for your organization, you can restrict specific users to SSO-only access (
sso_only: true).
This section covers user creation and invitation. See the Edit User and Delete User endpoints for the rest of the lifecycle.
Roles
| Role | Description |
|---|---|
| ORG_ADMIN (default) | Full control over the entire organization. |
| Group Manager | Manages one or more groups (collections of locations). |
| Business Manager | Manages one or more individual business locations. |
Authentication & SSO
- Password login: The user sets a password that meets security rules.
- SSO-only login: Set
sso_only: trueand omit (or setnull) thepasswordfield.
Create a User
Prerequisites
- API key passed in the
x-APIKeyheader. - Unique email, first_name, last_name.
- Optional role (defaults to
ORG_ADMIN).
Endpoint
Request & Response
Send one of the JSON payloads below.A successful call returns 200 OK with the created user object.
Invitation rules
•send_invitation: true— an email is sent immediately (unlesssso_onlyistrue).
•send_invitation: false— create the account silently; trigger Reinvite User later.
Payload examples
- ORG_ADMIN
- Group Manager
- Business Manager
End-to-end request in multiple languages
- cURL
- Python (requests)
- Java (OkHttp)
- PHP (cURL)
Parameters
| Name | Type | Default | Notes |
|---|---|---|---|
email | string <email> | — (required) | Must be unique. |
first_name | string | — (required) | User’s first name. |
last_name | string | — (required) | User’s last name. |
role | string | ORG_ADMIN | Optional. One of ORG_ADMIN, GROUP_MANAGER, BUSINESS_MANAGER. |
password | string | null | — | ≥ 8 chars, 1 upper, 1 lower, 1 special. Can be null if sso_only is true. |
lang | string | — | UI language (fr, en, es, it, pt-br, de, ar, nl, pl, cs, ca, sk, pt, lv, ro, bg, hu). |
sidebar_pages | array<string> | all features | Limit visible sidebar items (bulk_modification, diffusion, feedback_management, messages, posts, etc.). |
sso_only | boolean | false | When true, disables password login. |
send_invitation | boolean | false | Whether to send the invitation email immediately. |
accesses | array<integer> | — | Group Manager only – list of group IDs. |
business_ids | array<string> | — | Business Manager only – list of business IDs. |