> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fluz.app/llms.txt
> Use this file to discover all available pages before exploring further.

# addAuthorizedUser

> Add an authorized user to the caller's account with specified UAC roles.

Add an authorized user to the caller's account with specified UAC roles.
The target account is always resolved from the caller's credentials - Bearer tokens use
the token's accountId; Basic (API key) callers use the application's configured operator account.
Requires the MANAGE\_SUBUSERS scope. Supports both Bearer and Basic auth.
The target user must already exist in Fluz. If the user previously had a
DECLINED or INACTIVE assignment, it will be reactivated with the new roles.

```graphql theme={null}
mutation {
  addAuthorizedUser(
    email: String
    phone: String
    roles: [UACRoleType!]!
    status: UACRoleStatusType
    sendInvite: Boolean!
  ): AddAuthorizedUserResponse
}
```

## Arguments

<ParamField body="email" type="String">
  The email address of the user to add. At least one of email or phone is required.
</ParamField>

<ParamField body="phone" type="String">
  The phone number of the user to add. At least one of email or phone is required.
</ParamField>

<ParamField body="roles" type="[UACRoleType!]!" required>
  The UAC roles to assign. OWNER is not allowed.
</ParamField>

<ParamField body="status" type="UACRoleStatusType">
  The initial status for the role assignment. Defaults to PENDING.
</ParamField>

<ParamField body="sendInvite" type="Boolean!" required>
  Whether auth-service should send the role assignment invite email. Defaults to true.
  Set to false to create the assignment without sending an invite.
</ParamField>

## Returns

[`AddAuthorizedUserResponse`](/api-reference/types/add-authorized-user-response) — Response returned from the addAuthorizedUser mutation.