See [the MarkLogic docs](http://docs.marklogic.com/REST/POST/manage/v2/users) for what a user JSON/XML file can contain.