---
title: "How do I set up a personal user account?"
slug: "how-do-i-set-up-a-personal-user-account"
updated: 2025-12-18T15:29:09Z
published: 2025-12-18T15:29:09Z
canonical: "support.lusid.com/how-do-i-set-up-a-personal-user-account"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.lusid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How do I set up a personal user account?

You can set up a new account for a [personal user](/v1/docs/what-are-a-personal-user-and-a-service-user) in conjunction with the person for whom the account is intended. Note every user automatically gets a [unique ID](/v1/docs/what-is-a-user-id-and-how-do-i-discover-one).

> **Note:** If you are the LUSID domain owner, you are automatically assigned the built-in `lusid-administrator` role, which has all the permissions necessary to perform the operations in this article.

Once created, you should assign appropriate [roles](/v1/docs/what-is-a-role) to the user to grant permissions to use LUSID in keeping with their professional responsibilities.

## Using the LUSID web app

1. Sign in to the [LUSID web app](https://www.lusid.com/app) using the credentials of a LUSID administrator.
2. From the left-hand menu, select **Identity and Access > Users**: ![](https://cdn.document360.io/d575ad81-c0ed-4980-bbd1-d59ac5c3de82/Images/Documentation/image-1431RTPM.png)
3. On the **Users** dashboard, click the **Create user** button.
4. In the **Create user** dialog:
  1. Specify an **Account type** of **Personal**.
  2. Enter a valid **Email address** for that person (this will be their LUSID username; it must be unique within your LUSID domain).
  3. Optionally enable **User is temporary** and specify a **User Expiry** date (otherwise the account is valid forever). [More information](/v1/docs/what-are-a-personal-user-and-a-service-user#user-status).
  4. Optionally **Add roles** (permissions) for the user, athough you can also do this later: ![](https://cdn.document360.io/d575ad81-c0ed-4980-bbd1-d59ac5c3de82/Images/Documentation/image-LQO430ZD.png)
5. Click the **Save** button to send an email to [complete the sign up process](/v1/docs/how-do-i-set-up-a-personal-user-account#completing-the-sign-up-process).

## Using the Identity API

1. [Obtain an API access token](/v1/docs/how-do-i-obtain-and-use-a-short-lived-api-access-token-from-okta).
2. Call the [CreateUser](https://www.lusid.com/docs/api/identity/endpoints/users/CreateUser) API, passing in your API access token and specifying account characteristics. Note `login` and `emailAddress` must reference the same, valid email address (this will be their LUSID username), and it must be unique within your LUSID domain. If you omit `userExpiry`, a user is valid forever. For example:

```json
curl -X POST "https://<your-domain>.lusid.com/identity/api/users"
   -H "Authorization: Bearer <your-access-token>"
   -H "Content-Type: application/json"
   -d '{
  "emailAddress":"john.doe@acme.com",
  "firstName":"John",
  "lastName":"Doe",
  "login":"john.doe@acme.com",
  "roles":[],
  "type":"Personal",
  "userExpiry": "2027-01-01T12:00:00Z"
}'
```

The response contains an automatically-generated id that uniquely identifies the user:

```json
{
   "id": "00ubs2thwmMfDLhVN2p7",
   "emailAddress": "john.doe@acme.com",
   "login": "john.doe@acme.com",
   "firstName": "John",
   "lastName": "Doe",
   "roles": [],
   "type": "Personal",
   "status": "PROVISIONED",
   "external": false,
   "userExpiry": "2027-01-01T12:00:00.0000000+00:00",
   ...
}
```

An email is automatically sent to complete the sign up process.

## Completing the sign up process

The person for whom the account is intended must complete the sign up process by clicking the link in the email. If they don’t receive the email, you can [send it again](/v1/docs/how-do-i-change-passwords-or-mfa-settings-or-revoke-access#changing-the-credentials-of-other-users-via-the-lusid-web-app). This person must specify a password and set up at least one MFA factor.

Note the following:

- The user’s password must conform to [LUSID’s password policy](/v1/docs/what-are-lusids-password-policies) for personal users.
- You can [reset a user's password](/v1/docs/how-do-i-change-passwords-or-mfa-settings-or-revoke-access#changing-the-credentials-of-other-users-via-the-lusid-web-app) and force them to choose a new one.