## Syntax

## Request fields for change_user

The following fields can be used in the **change_user** method:

Field nameObligationDefinition/Value
attributesRequiredThe list of fields that you want to define or modify and their new values. For more information, see the **Attributes** table below.
create_onlyOptionalUsed to prevent changes to existing accounts. If set to **true** and the specified user exists, the account will not be modified and an error will be returned.
userRequiredThe user that you want to create or modify.

## Attributes fields

You can specify the following fields within the **attributes array**.

Field nameObligationDefinition/Value
aliasesOptionalThe list of alternate names for the account, for example, [[email protected]](🔗), [[email protected]](🔗), [[email protected].](🔗) Mail sent to an alias address is delivered to the account. The alias address can be used to log in to the account via IMAP4, POP3, Webmail and SMTP The maximum number of aliases is 2,000.
allowOptionalA list of email addresses on the user's allow list; may include wildcards. For example [[email protected]](🔗) and *@example.com. Maximum is 1000 addresses.
autoresponderOptionalThe text of the message that is automatically sent back to senders if **delivery_autoresponder** is set to **true**. Maximum size is 4,000 characters.
autoresponder_ option_enddateOptionalThe date that the autoresponder expires, expressed in UNIX Epoch time. If not specified, the autoresponder never expires.
autoresponder_option_intervalOptionalThe number of hours that must pass before the autoresponder message is sent again to the same address. Must be less than 1,095 (45 days). If not set, an interval of 24 hours is used.
blockOptionalA list of email addresses on the user's block list; may include wildcards. For example, [[email protected]](🔗) and *@spammers- inc.com. Messages from these addresses will always be considered to be spam. Maximum is 1000 addresses.
brandOptionalThe Webmail brand for this mailbox. If not specified, the account uses the domain setting.
delivery_ autoresponderOptionalIf set to **true**, the configured auto response message is sent to the sender.
delivery_filterOptionalIf set to true, messages are scanned and then passed to the domain's filtermx host; the messages are not stored locallly. **Note**: If **delivery_filter = true**, all other **delivery** attributes must be **false**.
delivery_forwardOptionalIf set to **true**, the message is forwarded to the mailbox's **forward_recipients** list.
delivery_localOptionalIf set to **true**, the message is passed through the mailbox's sieve filters and stored locally.

Valid combinations of **delivery** attributes are

  • **delivery_local**—Mail is stored locally.

  • **delivery_local**, **delivery_forward**—Mail is stored locally and forwarded.

  • **delivery_forward**—Mail is forwarded.

  • **delivery_local**, **delivery_autoresponder**—Mail is stored locally, automatic reply sent.

  • **delivery_local**, **delivery_forward**, **delivery_autoresponder**—Mail is stored locally and forwarded, automatic reply sent.

  • ** delivery_forward**, **delivery_autoresponder**—Mail is forwarded, automatic reply sent.

  • **delivery_filter**—Mail is forwarded to domain-defined mail host.


No matter which delivery options are set, all messages are scanned for viruses and malware, and, depending on the mailbox's allow list, all messages are scanned for spam.

Field nameObligationDefinition/Value
faxOptionalThe fax number for the account owner; can be a maximum of 30 characters.
filterdeliveryOptionalDetermines what happens to spam messages: _ **quarantine** — Spam messages are stored locally in the user's spam folder. _ **passthrough** — Spam messages are delivered with the specified spamtag and spamheader. If not defined, the account uses the domain's **filterdelivery** setting.
forward_option_restrictedOptionalIf set to **true** and **delivery_forward** is also set to **true**, only messages from addresses on the forward recipients list are forwarded.
forward_option_subject_prefixOptionalIf **delivery_forward** is set to **true**, this string is added to the beginning of the **Subject** line of forwarded messages. String can be up to 128 characters
forward_option_reply_toOptionalIf **delivery_forward** is set to **true**, this email address is added to the **Reply-To** header of forwarded messages.
forward_ recipientsOptionalIf **delivery_forward** is set to **true**, incoming messages will be forwarded to this list of addresses. Maximum number of addresses is 1,000.
languageOptionalThe default language in which the mailbox will be displayed. May be overridden by the user. A list of valid language names is displayed in the **metadata ->options** field in the [get_user](🔗) response.
macsettingsOptionalA string that contains the user's MAC UI preferences. Only used by the MAC; not recommended for use by other applications. Maximum 2048 characters.
max_pab_entriesOptionalThe maximum number of entries (contacts and groups) that the user can have in their address book.
nameOptionalThe name that is used in the From field of email messages. The format is UTF-8 text and can be up to 512 characters.
notes_externalOptionalAny notes you want to add to the user. Maximum is 4096 characters.
passwordOptionalThe password used to log in to all services. Here are the constraints are requirements for passwords: _ Can be plain text or hashed. _ If plain text, the text can be **between 1 and 54 characters** (Length must not exceed 54 characters). _ If hashed, it is a ASCII string consisting of an hash type in curly braces followed by 1 to 150 characters. _ Allowed hash types are: MD5 BCRYPT CRYPT DES SHA SHA1 SHA224 SHA256 SHA384 SHA512 SSHA SSHA1 SSHA224 SSHA256 SSHA384 SSHA512 GCRYPT (GCRYPT is for glibc hashed SHA and BCRYPT passwords from a shadow file on modern linux distributions). _ Passwords are always stored and retrieved hashed. If a plain text password is assigned, it will be hashed before it is stored. _ The only characters that can be used are ASCII characters with the decimal codes 33 and 35 to 126. _ An empty password is not allowed. _ A subset of ASCII 7-bit character set is allowed, including a to z, A to Z, 0 to 9, and the following special characters: ~ ! @ $ % ^ & _ ( ) - _ = + / \ ] [ { } : ; > < , . ‘ | ? # _ The following special characters are not allowed: Ö (ASCII character 153) Ä (ASCII character 142) Ü (ASCII character 154) ö (ASCII character 148) ä (ASCII character 132) ü (ASCII character 129) * Double quotation marks are not allowed (ASCII character 34). Delete (ASCII character 127) is not allowed. Space (ASCII character 32) is not allowed. See section on Password Validation, below.
phoneOptionalThe user's phone number; maximum 30 characters.
quotaOptionalThe maximum amount of storage (in bytes) that the mailbox may use, including mail and file storage.
reject_spamOptionalDetermines whether spam messages are rejected at the SMTP level. Allowed values are **true** and **false**.
service_imap4OptionalThe setting for the IMAP4 service (**enabled**, **disabled**, or **suspended**). If **enabled**, the user can log in via IMAP4.
service_pop3OptionalThe setting for the POP3 service (**enabled**, **disabled**, or **suspended**). If **enabled**, the user can log in via POP3.
service_smtpinOptionalThe setting for the SMTPIN service (enabled, disabled, or suspended). If enabled, the user can send email.
service_smtprelayOptionalThe setting for the SMTPRELAY service (**enabled**, **disabled**, or **suspended**).
service_smtprelay_web mailOptionalThe setting for the SMTPRELAY Webmail service (enabled, disabled, or suspended). If enabled, the user can send email via Webmail.
service_webmailOptionalThe setting for the Webmail service (**enabled**, webmail **disabled**, or **suspended**). If **enabled**, the user can log in via Webmail.

Password Validation

A user changing their own password is subject to an additional password strength test (when req.user == req.credentials.user). Increasing the length of the password and including a mix of symbols, upper and lower case letters, and numbers will increase the calculated strength of a given password. The required minimum strength level is inherited from the password_strength attribute set at the domain, company, or cluster level.

When creating a new user, if a service is not specified in the request, the value of the service attribute is taken from the domain setting. If the domain does not have a value for that service, it is **enabled**. If a service is **suspended** in the domain, it can only be set in the request by an admin of the same or higher level than the admin that set the service to **suspended** in the domain (for example, a domain admin cannot change a service that was suspended by a company admin).

Field nameObligationDefinition/Value
sieveOptionalThe user's sieve filters.
smtp_sent_limitOptionalThe number of messages that the user is allowed to send in a 24 hour period. Maximum number is 10,000. If not defined, the domain's **smtp_sent_limit** is used. **Note**: If the same message is sent to two recipients, it counts as two messages against this limit.
spamfolderOptionalThe folder into which messages identified as spam will be delivered. Maximum 128 characters. Nested folders are separated by the '/' character, for example, "Archive/Junk/Spam" If not defined, the mailbox uses the domain's spamfolder setting.
spamheaderOptionalThe tag that is added to messages that are identified as spam. Maximum 512 characters.
spamlevelOptionalThe level of aggressiveness set for the spam filter. Valid values are Normal, High, and Very High. If not set, the mailbox uses the domain's spamlevel setting.
spamtagOptionalThe value of this field is prepended to the subject of any message that is identified as spam. Maximum 30 characters. If not defined, the mailbox uses the domain's **spamtag** setting. **Note**: This value is not supported for filteronly accounts.
timezoneOptionalThe timezone that the mailbox will use. A list of valid timezones is displayed in the metadata ->options field in the [get_user](🔗) response.
titleOptionalThe user's job title;maximum 60 characters.
typeOptionalDetermines the type of account that is associated with this user. Allowed values are mailbox, forward, or filter. The default type when creating a user is mailbox. The type value in turn restricts the delivery method that can be specified. Mailbox accounts can have local and/or forward delivery, forward accounts can have only forward delivery, and filter accounts can have only filter delivery. Any incompatible delivery attributes that are submitted will be ignored.
workgroupOptionalThe workgroup to which the user belongs.

## Response fields for change_user

The following fields may be returned in response to the **change_user** method:

Field nameObligationDescription/Value
errorReturned if **success = false**A text string that explains the error.
error_numberReturned if **success = false**A number that represents the error.
hintsMay by returned when **success = false**A list of the attributes that had errors and the reason for each error.
successAlways returnedIndicates whether the request was successful or not. Allowed values are **true** and **false**.

## Examples for change_user

## Example 1

Successfully creates a new user.



## Example 2

Changes the user's spamtag attribute.



## Example 3

Attempts to modify an existing user, but fails due to badly formatted attributes.



## Example 4

Attempts to create a user that already exists (with **create_only** flag).



## Example 5

Changes a user to a filter.



## Example 6

Changes a user to a forward.



## Example 7

Changes a user to a mailbox.



## Example 8

Adds a note to a user