# Default Admin User

During installation, Connectware creates a default administrator user to ensure immediate system access. This user is named `admin` and has the `connectware-admin` role assigned to provide comprehensive permissions.

{% hint style="warning" %}
We strongly recommend to change the initial admin username and password after the first login. See [Changing Usernames](/2-1-2/documentation/user-management/users.md#changing-usernames) and [Changing User Passwords](/2-1-2/documentation/user-management/users.md#changing-user-passwords).
{% endhint %}

## Admin User Parameters

The following auth-server [environment variables](/2-1-2/documentation/environment-variables.md) are available for configuring the admin user. Parameters differ between Kubernetes and Docker deployments.

{% tabs %}
{% tab title="Kubernetes Parameters" %}

### Admin User Parameters (Kubernetes)

| Parameter                                         | Description                                                                    | Default value |
| ------------------------------------------------- | ------------------------------------------------------------------------------ | ------------- |
| `global.userManagement.adminUser.initialPassword` | Sets the initial password for the admin user. Must be a Base64-encoded string. | `admin`       |
| `global.userManagement.adminUser.enabled`         | Enables/disables the admin user. Accepts a boolean value (`true` or `false`).  | `true`        |
| {% endtab %}                                      |                                                                                |               |

{% tab title="Docker Parameters" %}

### Admin User Parameters (Docker)

| Parameter                           | Description                                                                    | Default value |
| ----------------------------------- | ------------------------------------------------------------------------------ | ------------- |
| `CYBUS_INITIAL_ADMIN_USER_PASSWORD` | Sets the initial password for the admin user. Must be a Base64-encoded string. | `admin`       |
| `CYBUS_ADMIN_USER_ENABLED`          | Enables/disables the admin user. Accepts a boolean value (`true` or `false`).  | `true`        |
| {% endtab %}                        |                                                                                |               |
| {% endtabs %}                       |                                                                                |               |

## Disabling the Default Admin User

{% hint style="warning" %}
Before disabling the default admin user, ensure you have created at least one other user with full administrative permissions. Otherwise, you may lose administrative access to your Connectware installation.
{% endhint %}

You can disable the default admin user after creating custom users that have admin permissions.

If the `global.userManagement.adminUser.initialPassword` Helm value (Kubernetes) or the `CYBUS_ADMIN_USER_ENABLED` environment variable (Docker) is not set, or if it has a value other than `false`, the default admin user is enabled and can log in with suitable credentials.

{% tabs %}
{% tab title="Kubernetes" %}

### Disabling the Default Admin User (Kubernetes)

1. Open the `values.yaml` file.
2. Set the `global.userManagement.adminUser.enabled` Helm value to `false`.

{% code lineNumbers="true" %}

```yaml
global:
  userManagement:
    adminUser:
      enabled: 'false'
```

{% endcode %}

3. Upgrade your Helm chart to apply the Helm configuration changes. For more information, see [Applying Helm configuration changes](/2-1-2/documentation/connectware-on-kubernetes/connectware-helm-chart.md#applying-helm-configuration-changes).

{% code lineNumbers="true" %}

```bash
helm upgrade -n ${NAMESPACE} ${INSTALLATION_NAME} -f values.yaml
```

{% endcode %}

4\. Try logging in with the admin user credentials to verify that the account has been disabled. You should receive a "wrong password" error.
{% endtab %}

{% tab title="Docker" %}

#### Disabling the Default Admin User (Docker)

1. Navigate to your Connectware installation directory. If you have used the default values during installation, this is the installation folder: `/opt/connectware`. The directory contains an `.env` file that is loaded when starting Connectware.
2. Open the `.env` file.
3. Set the `CYBUS_ADMIN_USER_ENABLED` environment variable to `false`.

{% code lineNumbers="true" %}

```yaml
environment:
  - CYBUS_ADMIN_USER_ENABLED=false
```

{% endcode %}

4. Start or restart Connectware. For more information, see [Restarting Connectware](/2-1-2/documentation/installation-and-upgrades/restarting-connectware.md).
5. Try logging in with the admin user credentials to verify that the account has been disabled. You should receive a "wrong password" error.
   {% endtab %}
   {% endtabs %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cybus.io/2-1-2/documentation/user-management/users/default-admin-user.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.