> ## Documentation Index
> Fetch the complete documentation index at: https://developers.logicgate.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Create an external user with no attached roles.



## OpenAPI

````yaml POST /api/v1/users/external
openapi: 3.1.0
info:
  title: Risk Cloud API (Legacy v1) — Auth
  description: >-
    The Risk Cloud API is a collection of RESTful API endpoints that empower you
    and your team to directly integrate, automate, and build with the Risk
    Cloud. Risk Cloud API endpoint payloads are JSON based, with some endpoints
    supporting exports in CSV and XSLX formats for flexible integration.


    This API documentation showcases our Risk Cloud API v1, containing a variety
    of endpoints with continued support for enabling integrations with the Risk
    Cloud.


    Visit the [LogicGate Risk Cloud Developer
    Portal](https://www.logicgate.com/developer/) to get started with building
    your custom integration with quick start guides, usage guides, release
    notes, and more. Or download the [v1 OpenAPI
    specification](/legacy-openapi.json).


    Explore our [Risk Cloud API v2](https://docs.logicgate.com/v2/index.html)
    endpoints and documentation as well. [Risk Cloud API
    v2](https://docs.logicgate.com/v2/index.html) is our collection of API-First
    endpoints that are tailor made for our developer users, offer concise and
    highly documented details, are supported by a [Postman
    collection](https://www.postman.com/logicgate-postman/workspace/logicgate-risk-cloud-api/collection/29257227-de8d264b-6eeb-4177-bea6-2da0a8cabffc)
    and [v2 OpenAPI specification](https://github.com/LogicGateTech/openapi),
    and contain our latest API endpoint releases.
  contact:
    name: developer-relations@logicgate.com
    email: developer-relations@logicgate.com
  version: v2026.8.2
servers:
  - url: https://{subdomain}.logicgate.com
    description: Your Risk Cloud environment.
    variables:
      subdomain:
        default: your-instance
        description: Your Risk Cloud environment's subdomain (e.g. `qa`).
security:
  - ApiToken: []
  - basic: []
tags:
  - name: Authentication
    description: >-
      Getting Started: How to create an [API Access
      Token](https://www.logicgate.com/developer/risk-cloud-api-authentication/)
      to begin integrating with the Risk Cloud API
  - name: Principal
    description: >-
      Endpoints for the authenticated principal to view and manage their own
      details.
  - name: SCIM
    description: >-
      SCIM (System for Cross-domain Identity Management) endpoints for
      provisioning and managing Users and Groups from an external identity
      provider.
  - name: External User
    description: >-
      Endpoints for creating and managing external (non-employee) users who
      access Risk Cloud via record-scoped tokens rather than standard login.
  - name: Account
    description: >-
      Endpoints for retrieving details about the current Risk Cloud
      account/environment.
externalDocs:
  description: Developer Portal
  url: https://www.logicgate.com/developer/
paths:
  /api/v1/users/external:
    post:
      tags:
        - External User
      summary: Create an external user with no attached roles.
      operationId: create_2
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/User_BasicUserSummary'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/User_UserSummary'
components:
  schemas:
    User_BasicUserSummary:
      allOf:
        - $ref: '#/components/schemas/CurrentValue_ExtendedRecordSummary'
        - type: object
          properties:
            email:
              type: string
            company:
              type: string
            imageUrl:
              type: string
            status:
              type: string
            tier:
              type: string
              enum:
                - PRIMARY
                - SECONDARY
                - LIMITED
            pricingUserTier:
              type: string
              enum:
                - STANDARD
                - POWER
            first:
              type: string
            last:
              type: string
            languageTag:
              type: string
            timeZone:
              type: string
            mfaEnabled:
              type: boolean
            mfaSetup:
              type: boolean
            autoprovisioned:
              type: boolean
            scimStatus:
              type: string
            sendEmail:
              type: boolean
            automatedUser:
              type: boolean
            automatedUserFieldLabels:
              type: array
              items:
                type: string
            roles:
              type: array
              items:
                $ref: '#/components/schemas/Role_BasicUserSummary'
            stepPermissionSets:
              type: array
              items:
                $ref: '#/components/schemas/StepPermissionSet_BasicUserSummary'
            applicationEntitlements:
              type: array
              items:
                $ref: '#/components/schemas/ApplicationEntitlement_BasicUserSummary'
            records:
              type: array
              description: records
              items:
                $ref: '#/components/schemas/Record_BasicUserSummary'
            lastLogin:
              oneOf:
                - $ref: '#/components/schemas/CredentialsRolled_ExtendedRecordSummary'
                - description: >-
                    And other types: LogInFail_ExtendedRecordSummary,
                    LogIn_ExtendedRecordSummary, LogOut_ExtendedRecordSummary,
                    TokenRolled_ExtendedRecordSummary
            lastDeactivated:
              type: string
              format: date-time
            serviceAccount:
              type: boolean
            disabled:
              type: boolean
            superUser:
              type: boolean
            external:
              type: boolean
            name:
              type: string
            locked:
              type: boolean
      description: Entity for storing all information pertaining to a user.
      discriminator:
        propertyName: status
      properties:
        status:
          type: string
      required:
        - status
    User_UserSummary:
      allOf:
        - $ref: '#/components/schemas/CurrentValue_ExtendedRecordSummary'
        - type: object
          properties:
            email:
              type: string
            company:
              type: string
            imageUrl:
              type: string
            status:
              type: string
            tier:
              type: string
              enum:
                - PRIMARY
                - SECONDARY
                - LIMITED
            pricingUserTier:
              type: string
              enum:
                - STANDARD
                - POWER
            mfaEnabled:
              type: boolean
            mfaSetup:
              type: boolean
            autoprovisioned:
              type: boolean
            scimStatus:
              type: string
            automatedUser:
              type: boolean
            automatedUserFieldLabels:
              type: array
              items:
                type: string
            lastLogin:
              oneOf:
                - $ref: '#/components/schemas/CredentialsRolled_ExtendedRecordSummary'
                - description: >-
                    And other types: LogInFail_ExtendedRecordSummary,
                    LogIn_ExtendedRecordSummary, LogOut_ExtendedRecordSummary,
                    TokenRolled_ExtendedRecordSummary
            lastDeactivated:
              type: string
              format: date-time
            serviceAccount:
              type: boolean
            disabled:
              type: boolean
            superUser:
              type: boolean
            external:
              type: boolean
            name:
              type: string
            locked:
              type: boolean
      description: Entity for storing all information pertaining to a user.
      discriminator:
        propertyName: status
      properties:
        status:
          type: string
      required:
        - status
    CurrentValue_ExtendedRecordSummary:
      type: object
      description: Entity used to manage record's field data.
      discriminator:
        propertyName: discriminator
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        idOrTransientId:
          type: string
        transientIdOrId:
          type: string
        textOrNumericValue:
          type: string
        empty:
          type: boolean
        discriminator:
          type: string
      required:
        - discriminator
    Role_BasicUserSummary:
      type: object
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        name:
          type: string
        locked:
          type: boolean
        superAdmin:
          type: boolean
        defaultRoleForNewUsers:
          type: boolean
        autoprovisioned:
          type: boolean
        externalId:
          type: string
        userCount:
          type: integer
          format: int32
    StepPermissionSet_BasicUserSummary:
      type: object
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
    ApplicationEntitlement_BasicUserSummary:
      type: object
      properties:
        neo4jId:
          type: integer
          format: int64
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        end:
          $ref: '#/components/schemas/Application_BasicUserSummary'
        endId:
          type: string
        startId:
          type: string
    Record_BasicUserSummary:
      type: object
      description: records
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        state:
          type: string
          enum:
            - ARCHIVED
            - LIVE
        sequenceId:
          type: integer
          format: int64
        recordName:
          type: string
        lastUpdated:
          type: string
          format: date-time
        viewableTitle:
          type: string
        workflowDueDate:
          type: string
          format: date-time
        recordType:
          type: string
          enum:
            - RECORD
            - JIRA_RECORD
        status:
          type: string
          enum:
            - INACTIVE
            - NOT_ASSIGNED
            - ASSIGNED
            - IN_PROGRESS
            - COMPLETE
        initialStateEndStep:
          type: boolean
        name:
          type: string
        isPublic:
          type: boolean
    CredentialsRolled_ExtendedRecordSummary:
      allOf:
        - $ref: '#/components/schemas/AccessAudit_ExtendedRecordSummary'
        - $ref: '#/components/schemas/AccessAudit_ExtendedJobSummary'
        - $ref: '#/components/schemas/AccessAudit_PublicRecordSummary'
    Application_BasicUserSummary:
      type: object
      description: >-
        An entity for managing top-level application data. A application
        represents the highest level of organization for other entities within
        the application.
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        name:
          type: string
          description: Name of the application.
        createdBy:
          description: Circular reference to User_BasicUserSummary
        description:
          type: string
          description: Description of the application.
          maxLength: 2000
          minLength: 0
        color:
          type: string
          description: Icon color of the application.
        icon:
          type: string
          description: Icon type of the application.
          enum:
            - >-
              fa-bookmark, fa-bolt, fa-bullhorn,
              fa-certificate,fa-check-square-o, fa-cloud, fa-comments,
              fa-dollar, fa-exclamation-triangle, fa-file-text-o,fa-folder,
              fa-gift, fa-globe, fa-heartbeat, fa-leaf, fa-legal, fa-life-ring,
              fa-medkit, fa-money,fa-percent, fa-rocket, fa-signal,
              fa-university, fa-user-circle
        type:
          type: string
        sourceApplicationId:
          type: string
        sourceEnvironment:
          type: string
        permissionsEnabled:
          type: boolean
        imported:
          type: boolean
        copied:
          type: boolean
        live:
          type: boolean
        currency:
          type: string
          enum:
            - EUR
            - GBP
            - USD
        uxriEnabled:
          type: boolean
          description: Whether or not UXRI is enabled on this application.
        shortCode:
          type: string
          description: Short display code for the application in navigation.
          pattern: >-
            ^(?! +$)[a-zA-Z0-9 ][a-zA-Z0-9 ]?[a-zA-Z0-9 ]?[a-zA-Z0-9
            ]?[a-zA-Z0-9 ]?[a-zA-Z0-9 ]?[a-zA-Z0-9 ]?[a-zA-Z0-9 ]?[a-zA-Z0-9
            ]?[a-zA-Z0-9 ]?$
        defaultHomeScreen:
          $ref: '#/components/schemas/HomeScreen_BasicUserSummary'
    AccessAudit_ExtendedRecordSummary:
      type: object
      description: Entity used to track authentication attempts.
      discriminator:
        propertyName: accessType
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        accessType:
          type: string
      required:
        - accessType
    AccessAudit_ExtendedJobSummary:
      type: object
      description: Entity used to track authentication attempts.
      discriminator:
        propertyName: accessType
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        accessType:
          type: string
      required:
        - accessType
    AccessAudit_PublicRecordSummary:
      type: object
      description: Entity used to track authentication attempts.
      discriminator:
        propertyName: accessType
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
        accessType:
          type: string
      required:
        - accessType
    HomeScreen_BasicUserSummary:
      type: object
      properties:
        id:
          type: string
        active:
          type: boolean
        created:
          type: string
          format: date-time
        updated:
          type: string
          format: date-time
  securitySchemes:
    ApiToken:
      type: http
      scheme: bearer
      bearerFormat: API Token
      description: Bearer token issued via the Authentication endpoints.
    basic:
      type: http
      scheme: basic
      description: >-
        HTTP Basic auth using base64-encoded Client Key:Secret Key credentials,
        used only to obtain or refresh a bearer token via the Authentication
        endpoints.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.