Bulk user import API giving permissions error

I am trying to bulk import users into zitadel using this API
https://zitadel.com/docs/apis/resources/admin/admin-service-import-data

but facing this issue,

No matching permissions found

No matching permissions found

No matching permissions found

No matching permissions found
I am using a service account in the API with the following roles

Org Owner
Org User Manager
Org User Permission Editor

ZITADEL Docs

Import data on an instance level to ZITADEL. It can be either directly in the request or you can point to a file on an S3 storage, from which the data should be loaded.

Ask Inkeep•11/26/25, 2:21 PM

Hi @Vaibhav, I'm an AI assistant for ZITADEL. While a team member reviews this question, I'll see if I can find relevant sources for your question.

Ask Inkeep•11/26/25, 2:21 PM

Answer

I wasn't able to find a direct answer to your permission issue with the bulk import API. Here are some relevant sources:

Configuration Options in ZITADEL : Discusses SystemAPIUsers configuration which may be relevant for system-level operations like bulk imports (1) .
Onboard B2B customers using organizations : Covers organization-level permissions and roles, noting that ORG_OWNER can manage users within their organization (2) .

The bulk import API you're referencing appears to be an Admin API endpoint, which typically requires system-level permissions rather than organization-level roles. The roles you've assigned (Org Owner, Org User Manager, Org User Permission Editor) are organization-scoped manager roles , but the Admin API may require instance-level or system-level permissions that aren't covered in the available sources.

Would you like me to provide a general answer based on my knowledge of ZITADEL's permission model?

Ask Inkeep•11/26/25, 2:21 PM

To learn more, see the sources I considered:

[1] Configuration Options in ZITADEL
[2] Onboard B2B customers using organizations

Ask Inkeep•11/26/25, 2:21 PM

Feel free to tag @Ask Inkeep with additional questions.

NightShadeOP•11/27/25, 8:54 AM

so how do I give the service user the system permissions?

NightShadeOP•11/27/25, 8:55 AM

I'm supposed to use a bearer token in the headers, in the other v2 apis, it was the service user's PAT token

AAsk Inkeep To learn more, see the sources I considered: [[1] Configuration Options in ZI...

Ask InkeepAPP•11/27/25, 8:56 AM

Got it. Tagging @Rajat for additional help.

Rajat Singh•11/27/25, 10:21 AM

Hey could you please try with iam owner permission?
You can access it by logging in with your admin account and clicking on default settings on top right

NightShadeOP•11/28/25, 1:26 PM

thanks for the input, I added it as a manger there and gave it the IAM Owner permission, now I am getting a 500 error

Rajat•11/29/25, 12:50 PM

hey @NightShade could you please share your api request?. And also a sample body job that you are trying to send?.
Are you importing from a file?. Can you please try it like this ?. Thanks

NightShadeOP•11/29/25, 2:14 PM

this is the script I am using
https://gist.github.com/jainvaibhav671/6a4b5ad340a356d93e26b5200e19e43e

Gist

import-users.py

GitHub Gist: instantly share code, notes, and snippets.