> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Create User
Create a new user.
* **Least privileged** Microsoft Graph permission to access the action via **application**: `User.ReadWrite.All`.
* **Higher privileged** Microsoft Graph permission to access the action via **application**: `Directory.ReadWrite.All`.
External Documentation
To learn more, visit the [Microsoft Entra ID documentation](https://learn.microsoft.com/en-us/graph/api/user-post-users?view=graph-rest-1.0\&tabs=http).
## Parameters
| Parameter | Description |
| ------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account Enabled | True if the account is enabled; otherwise, False. |
| Display Name | The name to display in the address book for the user. |
| Force User To Change Password On Next Sign-In | True if the user must change her password on the next login; otherwise false. If not set, default is false. |
| Force User To Change Password On Next Sign-In With MFA | If true, at next sign-in, the user must perform a multi-factor authentication (MFA) before being forced to change their password. The behavior is identical to forceChangePasswordNextSignIn except that the user is required to first perform a multi-factor authentication before password change. After a password change, this property will be automatically reset to false. If not set, default is false. |
| Mail Nickname | The mail alias for the user. |
| On Premises Immutable ID | Only needs to be specified when creating a new user account if you are using a federated domain for the user's userPrincipalName (UPN) property. |
| Password | The password for the user. |
| User Principal Name | The user principal name ([someuser@contoso.com](mailto:someuser@contoso.com)). It's an Internet-style login name for the user based on the Internet standard RFC 822. By convention, this should map to the user's email name. The general format is alias\@domain, where domain must be present in the tenant's collection of verified domains. |
## Example Output
```json theme={"dark"}
{
"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users/$entity",
"id": "87d349ed-44d7-43e1-9a83-5f2406dee5bd",
"businessPhones": [],
"displayName": "Adele Vance",
"givenName": "Adele",
"jobTitle": "Product Marketing Manager",
"mail": "AdeleV@contoso.com",
"mobilePhone": "+1 425 555 0109",
"officeLocation": "18/2111",
"preferredLanguage": "en-US",
"surname": "Vance",
"userPrincipalName": "AdeleV@contoso.com"
}
```
## Workflow Library Example
[Create a Temporary User with Active Directory](https://library.blinkops.com/workflows/create-a-temporary-user-with-active-directory)
Preview this Workflow on desktop