> ## Documentation Index > Fetch the complete documentation index at: https://learn.nexudus.com/llms.txt > Use this file to discover all available pages before exploring further. # Create User > Create a new User record. A User represents an administrator or staff member who can sign in to the Nexudus admin panel. Users are assigned roles that control their permissions and can be associated with one or more business locations. ## Authentication This endpoint requires OAuth2 authentication. Include a valid bearer token in the `Authorization` header. The authenticated user must be a full unrestricted administrator or have the **`User-Create`** role. ## Enums | Value | Name | | ----- | --------- | | 3 | EnglishUK | | 1 | EnglishUS | | 2 | Spanish | ## Request Body ### Required Fields Required full name shown for this staff account.. Required valid email address used to identify and sign in to this staff account.. Legacy language setting; use PreferredLanguage instead.. Password-hashing salt generated by the platform; never expose or set it.. Internal identifier of the last help page viewed by this user.. Internal count of failed login attempts; the platform resets it after a successful password change and applies its lockout threshold.. ### Optional Fields Authentication token generated by the platform; never expose or set it.. ID of the optional location language used for this account's preferred interface and content language.. New sign-in password; do not expose or set passwords through the Admin Agent.. Stored password hash; never expose or set it directly.. URL of a new file to upload as the avatar. Set to true to remove the current avatar file. ID of the optional marketplace application whose integration uses this account.. Whether this staff account is active; notification recipient queries generally require an active account.. Whether this account has administrator access in addition to any permissions granted through UserRoles.. Whether this account may authenticate for API access.. Whether the platform marks this account as validated.. Whether the user must reset their sign-in password; the platform sets this when it generates a password.. Read-only UTC timestamp of the latest account access, rounded down to the nearest 15 minutes.. Registered device identifiers used for device-based authentication; manage them outside the Admin Agent.. Whether to notify this active user about new internal messages for their locations.. Whether to notify this active user about new help desk messages for their locations.. Whether to notify this active user about new community wall posts for their locations.. Whether to notify this active user when a new customer profile is created for their locations.. Whether to notify this user about customer profile changes.. Whether to notify this active user with a customer profile at the location about new blog comments.. Whether to notify this active user with a customer profile at the location about new calendar-event comments.. Whether to notify this active user about plan changes; virtual-office plans instead use OnVirtualOfficeTariffChange.. Whether to notify this active user about booking changes for their locations.. Whether to notify this active user about tentative booking changes for their locations.. Whether to notify this active user about purchases for their locations.. Whether to notify this user when visitors register at their locations.. Whether to notify this user about Nexudus platform invoices for their locations.. Whether this user is subscribed to scheduled community-board digest emails; new accounts inherit the location digest setting.. Whether this user receives an email for each new community-board message instead of only digest notifications.. Two-factor authentication secret; never expose or set it.. Internal token-invalidating password-hash claim; never expose or set it.. List of locations this staff account can access; the account is included in location-scoped user queries only when linked to that location.. List of location-scoped user roles that grant this account permissions; administrator access may grant permissions independently.. Internal list of support chat rooms linked to this user; manage chat membership outside the Admin Agent.. Internal timestamp of the latest community thread included in this user's notification tracking.. Internal timestamp of the latest community message included in this user's notification tracking.. Internal timestamp for this user's next scheduled community digest.. Internal support-team routing email associated with this account.. Internal timestamp of the most recent failed login attempt, used with InvalidLoginAttempts for lockout handling.. Whether to notify this user about access-control errors for their locations.. Timestamp of the next help desk message reminder for this user.. Whether to notify this user when a customer is removed from a team.. Whether to notify this active user about virtual-office plan changes for their locations.. Whether to notify this user when a virtual-office customer updates delivery preferences.. Whether to notify this user when a customer's identity-check status changes.. ## Code Examples ```bash cURL theme={null} curl -X POST \ "https://spaces.nexudus.com/api/sys/users" \ -H "Authorization: Bearer YOUR_TOKEN" \ -H "Content-Type: application/json" \ -d '{ "FullName": "", "Email": "", "Language": 0, "PasswordSalt": "", "LastHelpVisited": 0, "InvalidLoginAttempts": 0 }' ``` ```javascript JavaScript theme={null} const response = await fetch( 'https://spaces.nexudus.com/api/sys/users', { method: 'POST', headers: { 'Authorization': 'Bearer YOUR_TOKEN', 'Content-Type': 'application/json' }, body: JSON.stringify({ FullName: '', Email: '', Language: 0, PasswordSalt: '', LastHelpVisited: 0, InvalidLoginAttempts: 0 }) } ); const data = await response.json(); ``` ```python Python theme={null} import requests response = requests.post( 'https://spaces.nexudus.com/api/sys/users', headers={ 'Authorization': 'Bearer YOUR_TOKEN', 'Content-Type': 'application/json' }, json={ 'FullName': '', 'Email': '', 'Language': 0, 'PasswordSalt': '', 'LastHelpVisited': 0, 'InvalidLoginAttempts': 0 } ) data = response.json() ``` ## Response ### 200 HTTP status code. `200` on success. A human-readable message confirming the creation. Contains the `Id` of the newly created record. `true` if the user was created successfully. `null` on success. ```json Example Response theme={null} { "Status": 200, "Message": "User was successfully created.", "Value": { "Id": 87654321 }, "OpenInDialog": false, "OpenInWindow": false, "RedirectURL": null, "JavaScript": null, "UpdatedOn": "2025-01-15T10:30:00Z", "UpdatedBy": "admin@example.com", "Errors": null, "WasSuccessful": true } ``` ### 400 A summary of the validation error(s), in the format `PropertyName: error message`. `null` on validation failure. Array of validation errors. The value that was submitted for the field, or `null` if missing. The validation error message. The name of the property that failed validation. `false` when the request fails validation. ```json Example Response theme={null} { "Message": "FullName: is a required field", "Value": null, "Errors": [ { "AttemptedValue": null, "Message": "is a required field", "PropertyName": "FullName" } ], "WasSuccessful": false } ```