# Set User Privileges through the API

{% hint style="info" %}
**Prerequisite:** You need administrative privileges to create and assign user privileges using the Cloud API.
{% endhint %}

To set user privileges using the Cloud API to manage IAM resources, follow these steps:

1\. Authenticate to the Cloud API using your API credentials.

2\. [<mark style="color:blue;">Create a user</mark>](https://api.ionos.com/docs/cloud/v6/#tag/User-management/operation/umUsersPost) using the POST `/cloudapi/v6/um/users` endpoint.

* Enter the following required parameters for the user:`firstname`, `lastname`, `email`, and `password`.

3\. [<mark style="color:blue;">Create a group</mark>](https://api.ionos.com/docs/cloud/v6/#tag/User-management/operation/umGroupsPost) using the POST `/cloudapi/v6/um/groups` endpoint.

* Enter the required group `name` parameter for the group.
* Set the `accessAndManageIamResources` privilege to `true`.

4\. [<mark style="color:blue;">Assign user to the group</mark>](https://api.ionos.com/docs/cloud/v6/#tag/User-management/operation/umGroupsUsersPost) that is created using the POST `/cloudapi/v6/um/groups/{groupId}/users` endpoint and provide the user ID in the header.

* Enter the required `id` parameter to identify the user uniquely.

{% hint style="success" %}
**Result:** The `accessAndManageIamResources` privilege is granted to the user.
{% endhint %}
