Create a user
POST/tap/api/v1/users
Creates a user, issues the user's certificate, and builds the certificate bundle. Requires the admin role. The default AWS roles are assigned when awsRoles is omitted or empty. When the sendWelcomeEmail setting is on and email integration is enabled, the user is sent a welcome email; it includes a download link valid for up to 8 hours when the showBundleLinks setting is on, and attaches the bundle when the sendWelcomeEmailWithAttachment setting is on. If the download link cannot be generated, the user is still created but no email is sent, and POST /tap/api/v1/users/{userId}/resend can send it later. bundlePath in the response is a presigned download link valid for up to 8 hours.
Request
Responses
- 200
- 400
- 403
- 422
- 500
The created user.
The request body is malformed, the full name or email is missing, the user role is blank or invalid, the email is already used by another user (compared without regard to case), or the user could not be saved.
The caller does not have the admin role, the caller tried to create a super_admin without being one, or the new user is active and the account user limit was reached.
Email domain validation is on and the email domain is not allowed.
The user could not be created, or the user was created but a later step failed. When the certificate could not be generated, the user exists without a certificate until POST /tap/api/v1/users/{userId}/certificate is called.