Admin-only. Depending on the target’s group_invite_policy and whether they’re a contact, may auto-add (outcome=joined) or create a pending invite (outcome=invited). Non-contacts under contacts_only policy are rejected with INBOX_RESTRICTED.
API key issued at registration, sent as Authorization: Bearer <key>.