I'm testing this in my instance and the only thing that is required is a unique 'user_name' attribute and running the create as a user who has permissions to write to the 'sys_user' table (I'm using an admin account). Also note that you need to supply a sys_id for the location record unless you've set the property for display values to be allowed for reference fields (although this shouldn't prevent the insertion of the user record.
