> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanova.io/llms.txt
> Use this file to discover all available pages before exploring further.

# 邀请共享用户

> POST /multi-users/

共享用户是您邀请加入 Scanova 账户的团队成员——与仪表盘 **Users** 表格中展示的列表相同。此端点让您可以以编程方式列出、邀请、更新或移除他们。

<Note>
  此端点此前未被记录过文档。它需要一个拥有 `MANAGEMENT_API`（或 `MANAGEMENT_API_SANDBOX`）配额的 Management API 密钥，以原始 `Authorization` 请求头的值发送——参见 [Management API 概览](/zh/api-reference/management-api/overview)——外加账户自身用于共享用户的 Team 配额。关于每个角色实际授予的权限，请参见[角色与权限](/zh/team/roles-and-permissions)；关于角色本身的数据格式，请参见[角色（访问级别）](/zh/api-reference/management-api/shared-users/roles-list)。
</Note>

<RequestExample>
  ```bash cURL theme={null}
  curl --request POST \
    --url 'https://management.scanova.io/multi-users/' \
    --header 'Authorization: YOUR_API_KEY' \
    --header 'Content-Type: application/json' \
    --data '{
      "email": "teammate@example.com",
      "name": "Jordan Lee",
      "access_level": 5
    }'
  ```
</RequestExample>

<ResponseExample>
  ```json 201 theme={null}
  {
    "id": 118,
    "shared_user": {
      "id": 88213,
      "first_name": "Jordan",
      "last_name": "Lee",
      "full_name": "Jordan Lee",
      "email": "teammate@example.com",
      "is_active": false,
      "is_locked": false
    },
    "access_level": {
      "id": 5,
      "name": "Manager",
      "slug": "manager",
      "permissions": [],
      "is_custom": false
    },
    "invitation_sent_on": null,
    "invitation_accepted_on": null,
    "is_invitation_sent": false,
    "is_invitation_accepted": false,
    "status": "Invitation Sent",
    "is_active": false,
    "created": "2026-08-16T20:41:09.442000+05:30",
    "modified": "2026-08-16T20:41:09.442000+05:30",
    "include_untagged": true,
    "enable_tag_permission": false,
    "tags": []
  }
  ```
</ResponseExample>

<ParamField body="email" type="string" required>
  新团队成员的邮箱地址。不得已属于其他 Scanova 用户——重复的邮箱地址会返回一个 400 错误，内容为 `{"email": ["Email address is already used."]}`。
</ParamField>

<ParamField body="name" type="string" required>
  显示名称，最多 20 个字符。
</ParamField>

<ParamField body="access_level" type="integer" required>
  来自 [`GET /multi-users/access-levels/`](/zh/api-reference/management-api/shared-users/roles-list) 的角色 ID——可以是默认的系统角色，也可以是此账户创建的自定义角色。
</ParamField>

<ParamField body="tags" type="array">
  用于限定此用户访问范围的标签 ID。需要账户的 `CUSTOM_TAG`/标签权限配额——否则会被 403 拒绝。
</ParamField>

<ParamField body="enable_tag_permission" type="boolean" default="false">
  将此用户可见的二维码限制为 `tags`。
</ParamField>

<ParamField body="include_untagged" type="boolean" default="true">
  当 `enable_tag_permission` 为 true 时，未打标签的二维码是否仍然可见。
</ParamField>

<Note>
  邀请团队成员总是会向其发送一封邀请邮件——在此创建记录，与在仪表盘的 Users 表格中点击 **Invite Users** 效果相同。没有办法通过此端点跳过发送邮件。
</Note>

## 相关内容

* [列出共享用户](/zh/api-reference/management-api/shared-users/list) — 同一端点的另一个操作。
* [获取共享用户](/zh/api-reference/management-api/shared-users/retrieve) — 在邀请该共享用户后，对其记录进行操作。
* [更新共享用户](/zh/api-reference/management-api/shared-users/update) — 在邀请该共享用户后，对其记录进行操作。
* [移除共享用户](/zh/api-reference/management-api/shared-users/remove) — 在邀请该共享用户后，对其记录进行操作。
* [列出角色](/zh/api-reference/management-api/shared-users/roles-list) —— 查找或创建本端点的邀请/更新调用所需的 `access_level` ID。
* [创建自定义角色](/zh/api-reference/management-api/shared-users/roles-create) —— 查找或创建本端点的邀请/更新调用所需的 `access_level` ID。
* [共享用户](/zh/team/shared-users) —— 仪表盘自身的 Users 表格，展示相同的邀请/停用/移除操作。
* [角色与权限](/zh/team/roles-and-permissions) —— 每个角色实际授予团队成员的权限。


## OpenAPI

````yaml api-reference/openapi/management-api.json POST /multi-users/
openapi: 3.1.0
info:
  title: Scanova Management API (v2)
  description: >-
    The complete Scanova Management API — every endpoint available at
    management.scanova.io (QR codes, folders, tags, leads, forms, analytics,
    plans, shared users & roles), plus the token-creation and usage-stats
    endpoints used to authenticate against it. Every path and request/response
    shape below was verified live against a real API key and the actual running
    backend (Phase 7, 2026-08-16) — not guessed from reading urls.py alone.
  version: 2.0.0
servers:
  - url: https://management.scanova.io
    description: Management API — QR/folder/tag/lead/form/analytics/plans endpoints
security:
  - apiKeyAuth: []
paths:
  /multi-users/:
    post:
      summary: Invite a shared user
      operationId: createManagedSharedUser
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  format: email
                name:
                  type: string
                  maxLength: 20
                access_level:
                  type: integer
                  description: Role ID from GET /multi-users/access-levels/.
                tags:
                  type: array
                  items:
                    type: integer
                enable_tag_permission:
                  type: boolean
                  default: false
                include_untagged:
                  type: boolean
                  default: true
              required:
                - email
                - name
                - access_level
            example:
              email: teammate@example.com
              name: Jordan Lee
              access_level: 5
      responses:
        '201':
          description: Invitation created — sends an invitation email to the shared user.
          content:
            application/json:
              example:
                id: 118
                shared_user:
                  id: 88213
                  first_name: Jordan
                  last_name: Lee
                  full_name: Jordan Lee
                  email: teammate@example.com
                  is_active: false
                  is_locked: false
                access_level:
                  id: 5
                  name: Manager
                  slug: manager
                  permissions: []
                  is_custom: false
                invitation_sent_on: null
                invitation_accepted_on: null
                is_invitation_sent: false
                is_invitation_accepted: false
                status: Invitation Sent
                is_active: false
                include_untagged: true
                enable_tag_permission: false
                tags: []
components:
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
      description: >-
        Send your Management API key as the raw value of the Authorization
        header — no "Bearer " or "Token " prefix, and no other characters.
        Example: `Authorization: 401f7ac837da42b97f613d789819ff93537bee6a`. A
        header containing more than one space-separated part is rejected
        outright. Requests also require the request's Host header to be the
        management API host (e.g. management.scanova.io) — the same key sent to
        the regular API host will not authenticate.

````