POST /api/v1/users
Requires the users:write management permission. The service validates role assignment and tenant scope against the caller.
users:write
User created.