[Yandex Cloud documentation](../../../../../index.md) > [Yandex Identity Hub](../../../../index.md) > API reference > gRPC > [Identity Provider API](../index.md) > [User](index.md) > Create

# Identity Provider API, gRPC: UserService.Create

Creates a user in the specified userpool.

## gRPC request

**rpc Create ([CreateUserRequest](#yandex.cloud.organizationmanager.v1.idp.CreateUserRequest)) returns ([operation.Operation](#yandex.cloud.operation.Operation))**

## CreateUserRequest {#yandex.cloud.organizationmanager.v1.idp.CreateUserRequest}

```json
{
  "userpool_id": "string",
  "username": "string",
  "full_name": "string",
  "given_name": "string",
  "family_name": "string",
  "email": "string",
  "phone_number": "string",
  // Includes only one of the fields `password_spec`, `password_hash`
  "password_spec": {
    "password": "string",
    "generation_proof": "string"
  },
  "password_hash": {
    "password_hash": "string",
    "password_hash_type": "PasswordHashType"
  },
  // end of the list of possible fields
  "is_active": "google.protobuf.BoolValue",
  "external_id": "string",
  "company_name": "string",
  "department": "string",
  "job_title": "string",
  "employee_id": "string",
  "expires_at": "google.protobuf.Timestamp"
}
```

Request to create a new user.

#|
||Field | Description ||
|| userpool_id | **string**

Required field. ID of the userpool to create the user in.

The maximum string length in characters is 50. ||
|| username | **string**

Required field. Username for the new user.

The maximum string length in characters is 254. Value must match the regular expression ` [a-z0-9A-Z\._-]{1,64}@.{1,256} `. ||
|| full_name | **string**

Required field. Full name of the user.

The maximum string length in characters is 256. ||
|| given_name | **string**

First name of the user.

The maximum string length in characters is 256. ||
|| family_name | **string**

Last name of the user.

The maximum string length in characters is 256. ||
|| email | **string**

Email address of the user.

The maximum string length in characters is 254. Value must match the regular expression ``` |(.{3,254}) ```. ||
|| phone_number | **string**

Phone number of the user.

The maximum string length in characters is 50. ||
|| password_spec | **[PasswordSpec](#yandex.cloud.organizationmanager.v1.idp.PasswordSpec)**

Password specification. Credentials type. Exactly one of credentials type must be specified.

Includes only one of the fields `password_spec`, `password_hash`.

User credentials. ||
|| password_hash | **[PasswordHash](#yandex.cloud.organizationmanager.v1.idp.PasswordHash)**

Password hash. Credentials type. Exactly one of credentials type must be specified.

Includes only one of the fields `password_spec`, `password_hash`.

User credentials. ||
|| is_active | **[google.protobuf.BoolValue](https://developers.google.com/protocol-buffers/docs/reference/csharp/class/google/protobuf/well-known-types/bool-value)**

Whether the user is active. Default is true. ||
|| external_id | **string**

External identifier for the user.

The maximum string length in characters is 256. ||
|| company_name | **string**

User's company name.

The maximum string length in characters is 256. ||
|| department | **string**

User's department.

The maximum string length in characters is 256. ||
|| job_title | **string**

User's job title.

The maximum string length in characters is 256. ||
|| employee_id | **string**

User's employee ID

The maximum string length in characters is 256. ||
|| expires_at | **[google.protobuf.Timestamp](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp)**

Timestamp when the user account expires. ||
|#

## PasswordSpec {#yandex.cloud.organizationmanager.v1.idp.PasswordSpec}

Password specification.

#|
||Field | Description ||
|| password | **string**

Required field. The password string.

The maximum string length in characters is 128. ||
|| generation_proof | **string**

Proof that the password was generated by the system.

The maximum string length in characters is 128. ||
|#

## PasswordHash {#yandex.cloud.organizationmanager.v1.idp.PasswordHash}

Password hash information.

#|
||Field | Description ||
|| password_hash | **string**

Required field. The password hash string.

The maximum string length in characters is 256. ||
|| password_hash_type | enum **PasswordHashType**

Required field. Type of the password hash.

- `AD_MD4`: Microsoft Active Directory MD4 hash.
- `LDAP_PBKDF2_SHA256`: 389 legacy format `{PBKDF2_SHA256}` (underscore).
Supported by 389 DS, FreeIPA, ALD Pro.
- `LDAP_PBKDF2_SHA256_OPENLDAP`: OpenLDAP-compatible format `{PBKDF2-SHA256}` (hyphen). Supported by 389 DS, FreeIPA, ALD Pro.
- `LDAP_PBKDF2_SHA512`: Supported by 389 DS, FreeIPA, ALD Pro.
- `LDAP_PKCS5S2`: Supported by Apache Directory Server. ||
|#

## operation.Operation {#yandex.cloud.operation.Operation}

```json
{
  "id": "string",
  "description": "string",
  "created_at": "google.protobuf.Timestamp",
  "created_by": "string",
  "modified_at": "google.protobuf.Timestamp",
  "done": "bool",
  "metadata": "google.protobuf.Any",
  // Includes only one of the fields `error`, `response`
  "error": "google.rpc.Status",
  "response": "google.protobuf.Any"
  // end of the list of possible fields
}
```

An Operation resource. For more information, see [Operation](../../../../../api-design-guide/concepts/operation.md).

#|
||Field | Description ||
|| id | **string**

ID of the operation. ||
|| description | **string**

Description of the operation. 0-256 characters long. ||
|| created_at | **[google.protobuf.Timestamp](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp)**

Creation timestamp. ||
|| created_by | **string**

ID of the user or service account who initiated the operation. ||
|| modified_at | **[google.protobuf.Timestamp](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp)**

The time when the Operation resource was last modified. ||
|| done | **bool**

If the value is `false`, it means the operation is still in progress.
If `true`, the operation is completed, and either `error` or `response` is available. ||
|| metadata | **[google.protobuf.Any](https://developers.google.com/protocol-buffers/docs/proto3#any)**

Service-specific metadata associated with the operation.
It typically contains the ID of the target resource that the operation is performed on.
Any method that returns a long-running operation should document the metadata type, if any. ||
|| error | **[google.rpc.Status](https://cloud.google.com/tasks/docs/reference/rpc/google.rpc#status)**

The error result of the operation in case of failure or cancellation.

Includes only one of the fields `error`, `response`.

The operation result.
If `done == false` and there was no failure detected, neither `error` nor `response` is set.
If `done == false` and there was a failure detected, `error` is set.
If `done == true`, exactly one of `error` or `response` is set. ||
|| response | **[google.protobuf.Any](https://developers.google.com/protocol-buffers/docs/proto3#any)**

The normal response of the operation in case of success.
If the original method returns no data on success, such as Delete,
the response is [google.protobuf.Empty](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#google.protobuf.Empty).
If the original method is the standard Create/Update,
the response should be the target resource of the operation.
Any method that returns a long-running operation should document the response type, if any.

Includes only one of the fields `error`, `response`.

The operation result.
If `done == false` and there was no failure detected, neither `error` nor `response` is set.
If `done == false` and there was a failure detected, `error` is set.
If `done == true`, exactly one of `error` or `response` is set. ||
|#