diff --git a/src/controllers/user-controller.ts b/src/controllers/user-controller.ts
index d95a5a4..caedd93 100644
--- a/src/controllers/user-controller.ts
+++ b/src/controllers/user-controller.ts
@@ -288,7 +288,7 @@ export class UserController extends Controller {
   }
 
   @Post()
-  @Security("keycloak", ["system", "head_of_admin", "admin", "branch_admin"])
+  @Security("keycloak", ["system", "head_of_admin", "admin", "branch_admin", "branch_manager"])
   async createUser(@Request() req: RequestWithUser, @Body() body: UserCreate) {
     const [province, district, subDistrict, branch, user] = await prisma.$transaction([
       prisma.province.findFirst({ where: { id: body.provinceId ?? undefined } }),