Add user to firm

POST/api/v1/advisory-firms/{firm_id}/users

Add a user to an advisory firm by user_id or email.

Operation ID: add_user_to_firm·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Parameters

Path

firm_idstringrequired

Request body

Schema: UserFirmAssociationCreateRequest

user_idstring

User UUID. Supply either user_id or email.

emailstring

User email. When provided without user_id, the backend resolves it.

rolestring

User's role in the firm. owner: Full access + billing + user management. admin: Full access + user management (no billing). member: Access to assigned businesses only.

One of: owner, admin, member, client

Responses

201Successful Response

Schema: SuccessEnvelope_UserFirmAssociationResponse_

successboolean
messagestring
codestring
dataUserFirmAssociationResponse

422Validation Error

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

Code samples

POST/api/v1/advisory-firms/{firm_id}/users

bash

curl -X POST 'https://api.ondayzero.com/api/v1/advisory-firms/{firm_id}/users' \
  -H 'Authorization: Bearer dz_your_token' \
  -H 'x-business-id: YOUR_BUSINESS_ID' \
  -H 'Content-Type: application/json' \
  -d '{
  "user_id": "string",
  "email": "string",
  "role": "owner"
}'