Cloud Administration Create Local User API
Use the Cloud Administration Create Local User API to add a new user account to a local identity source. With this API, you can create a user and set their username and password.
For more information about managing access to this API, see Accessing the Cloud Administration APIs.
Authentication
This API is accessible only via OAuth and does not support the legacy JSON Web Token (JWT) authentication flow. For more information, see Manage OAuth API Clients.
You need the "rsa.group.users.manage" OAuth permission to use this endpoint.
Software Developer Kit
You can download the API Software Developer Kit (SDK) from Cloud Administration REST API Download.
Request Requirements
Use the following information to create a local user.
| Method | Request URL | Response Codes |
|---|---|---|
| POST | /AdminInterface/restapi/v1/users/create | 200, 400, 403 |
Request Parameter
The following table describes the request body parameter.
| Request Parameter | Description | Data Type |
|---|---|---|
| customerId | Unique customer identifier | Long |
Example Request Body
The following is an example request body.
{
"id": "",
"firstName": "Joe",
"lastName": "Schmoe",
"userName": "jschmoe",
"email": "jschmoe@rsavia.com",
"defaultSmsPhone": "1234567890",
"defaultVoicePhone": "1234567890",
"managerEmail": "testManager@rsavia.com",
"identitySource": "Local Identity Source",
"password": null,
"passwordCreationOption": "NONE",
"passwordSendMethod": "NONE",
"initialPasswordEmail": "",
"alternateUsernames": ["group1", "group2"],
"groupMemberships": ["group1", "group2"],
"smsPhoneNumbers": ["1234567891", "1234567892"],
"voicePhoneNumbers": ["1234567891", "1234567892"]
}Request Properties Descriptions
The following table explains the request properties.
| Field | Description | Required |
|---|---|---|
| First name | User's first name. | Yes |
| User name | Unique username. | Yes |
| User's email address. | Yes | |
| IdentitySource | Source of user identity (for example, local or LDAP). | Yes |
| PasswordCreationOption | Specifies how the user's password is set. Options are "NONE", "GENERATE_AND_SEND", and "ENTERED_BY_ADMIN". | Yes |
| passwordSendMethod | Specifies how the system delivers the generated password to the user. Options are "NONE" and "EMAIL". | Required only if passwordCreationOption is set to "GENERATE_AND_SEND" |
Example Response
The following is an example response.
{
"cloud_directory_enabled": true,
"user_id": "80800c5b-707b-3cd4-de78-48e67e4a923d",
"email": "jschmoe@rsavia.com",
"first_name_valid": true,
"last_name_valid": true
"username_valid": true,
"email_valid": true,
"email_failure_reason": null,
"sms_phone_valid": true,
"voice_phone_valid": true,
"manager_email_valid": true,
"manager_email_failure_reason": null,
"identity_source_valid": true,
"password_valid": true,
"initial_password_email_valid": false,
"password_send_method_valid": true,
"alternate_username_valid": [true, true],
"virtualgroups_valid": [true, true],
"sms_phone_list_valid": [true, true],
"voice_phone_list_valid": [true, true],
"save_succeeded": true,
"save_failure_reason": null,
"duplicate_username": false,
"validation_errors": [],
}Response Codes
The following table lists the response codes and their descriptions for this API.
| Code | Description |
|---|---|
| 200 | A request to create a user has been submitted successfully. The saveSucceeded variable in the UserUpdateStatusPublicDTO will indicate whether the user was created successfully. |
| 400 | The operation could not be completed. One of the following error messages may be returned:
|
| 403 | Not authorized to perform the request. The request includes incorrect OAuth permissions. |
Related Articles
RSA Governance & Lifecycle Integration: System for Cross-domain Identity Management SCIM Summary 38Number of Views Cloud Administration Update Local User API 3Number of Views Cloud Administration Retrieve License Usage API Version 1 41Number of Views SCIM API for User Modification 99Number of Views Cloud Administration Mark User Deleted API 66Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x