Register User
Create a new user with role assignments.
POST /api/auth/register
Create a new user in the active tenant and assign their roles. The calling user can only assign roles below their own.
Auth: Required — user:create permission
Headers
| Header | Required | Value |
|---|---|---|
Authorization | Yes | Bearer <access_token> |
x-tenant-id | Yes | Tenant UUID |
Request Body
| Field | Type | Required | Description |
|---|---|---|---|
firstName | string | Yes | First name (maximum 255 characters) |
lastName | string | Yes | Last name (maximum 255 characters) |
username | string | Yes | Username, unique (maximum 100 characters); it can be used to log in |
email | string | Yes | Email, unique |
password | string | Yes | Password (8 to 100 characters) |
roles | string[] | Yes | Role values to assign, at least one: admin, fde, supervisor, operator, viewer (see Roles & Permissions) |
Example
curl -X POST https://api.reten.ai/api/auth/register \
-H "Authorization: Bearer <token>" \
-H "x-tenant-id: <tenant-id>" \
-H "Content-Type: application/json" \
-d '{
"email": "newuser@example.com",
"password": "SecurePass123!",
"firstName": "Jane",
"lastName": "Doe",
"username": "jdoe",
"roles": ["fde"]
}'const response = await fetch("https://api.reten.ai/api/auth/register", {
method: "POST",
headers: {
"Authorization": "Bearer <token>",
"x-tenant-id": "<tenant-id>",
"Content-Type": "application/json",
},
body: JSON.stringify({
email: "newuser@example.com",
password: "SecurePass123!",
firstName: "Jane",
lastName: "Doe",
username: "jdoe",
roles: ["fde"],
}),
});
const user = await response.json();import requests
response = requests.post(
"https://api.reten.ai/api/auth/register",
headers={
"Authorization": "Bearer <token>",
"x-tenant-id": "<tenant-id>",
},
json={
"email": "newuser@example.com",
"password": "SecurePass123!",
"firstName": "Jane",
"lastName": "Doe",
"username": "jdoe",
"roles": ["fde"],
},
)
user = response.json()Response 201 Created
{
"id": "770e8400-e29b-41d4-a716-446655440000",
"firstName": "Jane",
"lastName": "Doe",
"username": "jdoe",
"email": "newuser@example.com",
"roles": ["fde"],
"isActive": true,
"createdAt": "2026-09-28T14:30:00.000Z"
}Error Responses
| Status | Description |
|---|---|
400 | Validation error — a field is missing or invalid, an unknown field is sent, or roles holds a value that is not a role |
400 | roles is empty — At least one role is required |
403 | Missing permission — Required permissions: user:create |
403 | A requested role is equal to or higher than the current user's — Cannot assign role <role> - you can only assign roles lower than your own |
409 | Email already in use |
409 | Username already in use |