# Using API to manage users, roles and groups

Use Talend Cloud SCIM API endpoints to automate the processes to create users, assign users to groups, assign roles to users and retrieve user profiles.

For details about these endpoints, see [this link](https://api.talend.com/apis/scim-v2/2021-03/).

Information noteNote: You can also use the classic [identity management API endpoints](https://api.talend.com/apis/identities-management/2021-03/) to automate this process. For a use case of these classic endpoints, see [Creating a user](https://api.talend.com/use-cases/identities-management/creating-user/).

Prerequisites:

* Generate access tokens:

  * For users, generate a personal access token by following [Generating a Personal Access Token](https://help.qlik.com/talend/r/en-US/Cloud/management-console-user-guide/cloud-access-token).
  * For service accounts, generate a service access token by following [Generating a service account token](https://help.qlik.com/talend/r/en-US/Cloud/api-user-guide/generate-service-account-token).

  Once generated, a service account token expires after 30 minutes. If it expires, generate a new token using the POST method at the endpoint https://api.<env>.cloud.talend.com/security/oauth/token. For more information about generating a token, see [Generating a service account token](https://help.qlik.com/talend/r/en-US/Cloud/api-user-guide/generate-service-account-token).

### In this section

* [Using API to get role IDs](https://help.qlik.com/talend/en-US/api-user-guide/Cloud/use-api-to-get-role-ids)
* [Using API to create a user](https://help.qlik.com/talend/en-US/api-user-guide/Cloud/use-api-to-create-user)