Group User - Create

Add existing user to existing group

PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/groups/{groupId}/users/{userId}?api-version=2022-08-01

URI Parameters

Name In Required Type Description
groupId
path True

string

Group identifier. Must be unique in the current API Management service instance.

resourceGroupName
path True

string

The name of the resource group. The name is case insensitive.

serviceName
path True

string

The name of the API Management service.

Regex pattern: ^[a-zA-Z](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$

subscriptionId
path True

string

The ID of the target subscription.

userId
path True

string

User identifier. Must be unique in the current API Management service instance.

api-version
query True

string

The API version to use for this operation.

Responses

Name Type Description
200 OK

UserContract

The specified user is already a member of the specified group.

201 Created

UserContract

The user was successfully added to the group.

Other Status Codes

ErrorResponse

Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

ApiManagementCreateGroupUser

Sample Request

PUT https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.ApiManagement/service/apimService1/groups/tempgroup/users/59307d350af58404d8a26300?api-version=2022-08-01

Sample Response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.ApiManagement/service/apimService1/users/59307d350af58404d8a26300",
  "type": "Microsoft.ApiManagement/service/groups/users",
  "name": "59307d350af58404d8a26300",
  "properties": {
    "firstName": "test",
    "lastName": "user",
    "email": "testuser1@live.com",
    "state": "active",
    "registrationDate": "2017-06-01T20:46:45.437Z",
    "groups": [],
    "identities": []
  }
}
{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.ApiManagement/service/apimService1/users/59307d350af58404d8a26300",
  "type": "Microsoft.ApiManagement/service/groups/users",
  "name": "59307d350af58404d8a26300",
  "properties": {
    "firstName": "test",
    "lastName": "user",
    "email": "testuser1@live.com",
    "state": "active",
    "registrationDate": "2017-06-01T20:46:45.437Z",
    "groups": [],
    "identities": []
  }
}

Definitions

Name Description
ErrorFieldContract

Error Field contract.

ErrorResponse

Error Response.

GroupContractProperties

Group contract Properties.

GroupType

Group type.

UserContract

User details.

UserIdentityContract

User identity details.

UserState

Account state. Specifies whether the user is active or not. Blocked users are unable to sign into the developer portal or call any APIs of subscribed products. Default state is Active.

ErrorFieldContract

Error Field contract.

Name Type Description
code

string

Property level error code.

message

string

Human-readable representation of property-level error.

target

string

Property name.

ErrorResponse

Error Response.

Name Type Description
error.code

string

Service-defined error code. This code serves as a sub-status for the HTTP error code specified in the response.

error.details

ErrorFieldContract[]

The list of invalid fields send in request, in case of validation error.

error.message

string

Human-readable representation of the error.

GroupContractProperties

Group contract Properties.

Name Type Description
builtIn

boolean

true if the group is one of the three system groups (Administrators, Developers, or Guests); otherwise false.

description

string

Group description. Can contain HTML formatting tags.

displayName

string

Group name.

externalId

string

For external groups, this property contains the id of the group from the external identity provider, e.g. for Azure Active Directory aad://<tenant>.onmicrosoft.com/groups/<group object id>; otherwise the value is null.

type

GroupType

Group type.

GroupType

Group type.

Name Type Description
custom

string

external

string

system

string

UserContract

User details.

Name Type Default Value Description
id

string

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

name

string

The name of the resource

properties.email

string

Email address.

properties.firstName

string

First name.

properties.groups

GroupContractProperties[]

Collection of groups user is part of.

properties.identities

UserIdentityContract[]

Collection of user identities.

properties.lastName

string

Last name.

properties.note

string

Optional note about a user set by the administrator.

properties.registrationDate

string

Date of user registration. The date conforms to the following format: yyyy-MM-ddTHH:mm:ssZ as specified by the ISO 8601 standard.

properties.state

UserState

active

Account state. Specifies whether the user is active or not. Blocked users are unable to sign into the developer portal or call any APIs of subscribed products. Default state is Active.

type

string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

UserIdentityContract

User identity details.

Name Type Description
id

string

Identifier value within provider.

provider

string

Identity provider name.

UserState

Account state. Specifies whether the user is active or not. Blocked users are unable to sign into the developer portal or call any APIs of subscribed products. Default state is Active.

Name Type Description
active

string

User state is active.

blocked

string

User is blocked. Blocked users cannot authenticate at developer portal or call API.

deleted

string

User account is closed. All identities and related entities are removed.

pending

string

User account is pending. Requires identity confirmation before it can be made active.