You can use the acs__add_user/acs.add_user plsql functions directly to add users but it's better to use the ad_user_new TCL function because the passwords are encrypted in the database. If you use the plsql scripts directly, you could just insert a random password and when the user trys to login, the server can reset the password and email it to the user.