# Create user

Create a user and set the mfaBypass property for testing purposes.

This route is for management use only.

Endpoint: POST /resources/vendor-only/users/v1
Security: bearer

## Request fields (application/json):

  - `email` (string)

  - `username` (string)
    The username of the user. If not provided, the email is required. Maximum length is 255 characters.

  - `name` (string)

  - `password` (string)

  - `phoneNumber` (string)

  - `metadata` (string)
    Stringified JSON object

  - `vendorMetadata` (string)
    Extra vendor-only data. stringified JSON object

  - `roleIds` (array)
    Role IDs to assign to the user

  - `tenantId` (string, required)

  - `expirationInSeconds` (number)
    Temporary user expiration in seconds

  - `mfaBypass` (boolean)
    Bypass MFA for this user

  - `externalId` (string)
    The external id of the user

## Response 201 fields (application/json):

  - `id` (string, required)

  - `email` (string, required)

  - `name` (string, required)

  - `profilePictureUrl` (string, required)

  - `sub` (string, required)

  - `verified` (boolean, required)

  - `mfaEnrolled` (boolean, required)

  - `mfaBypass` (boolean)

  - `phoneNumber` (string)

  - `roles` (array, required)

  - `roles.vendorId` (string, required)

  - `roles.tenantId` (string, required)

  - `roles.key` (string, required)

  - `roles.description` (string, required)

  - `roles.isDefault` (boolean, required)

  - `roles.firstUserRole` (boolean, required)

  - `roles.level` (number, required)

  - `roles.createdAt` (string, required)

  - `roles.updatedAt` (string, required)

  - `roles.permissions` (array, required)

  - `provider` (string, required)

  - `tenantIds` (array, required)

  - `activatedForTenant` (boolean)

  - `isLocked` (boolean)

  - `tenants` (array, required)

  - `tenants.temporaryExpirationDate` (string)

  - `tenants.isDisabled` (boolean)

  - `invisible` (boolean)

  - `superUser` (boolean)

  - `metadata` (string, required)

  - `vendorMetadata` (string, required)

  - `externalId` (string)

  - `lastLogin` (string, required)

  - `groups` (array)

  - `subAccountAccessAllowed` (boolean, required)

  - `managedBy` (string)
    Enum: "frontegg", "scim2", "external"