Api Accounts Create
POST handler with superadmin-only field protection.
Strips superadmin-only fields from non-superadmin requests before delegating to OrganizationInjectionMixin.post() for org injection.
Authentication
AuthorizationBearer
JWT access token or Respan API key
Request
This endpoint expects an object.
email
password
name
username
first_name
last_name
is_active
organization_name
create_organization
Response
id
email
created_at
organization
DEV-10098: the “Customize retention policy” toggle IS the override’s presence.
Organization.is_custom_retention_enabled was never read by
enforce_data_retention — the cron only ever min()s
logs_retention_period_in_days with the plan window — so switching the
toggle off left the stale override silently hard-deleting on the old (shorter)
window while the page claimed the plan default. The column is retired; the wire
field of the same name keeps its shape but is now DERIVED from the override, so
what the page renders is what the cron enforces.
name
username
first_name
last_name
is_active