You are browsing documentation for an older version. See the latest documentation here.

Create a Super Admin

If you seeded a Super Admin at the time of running migrations by passing KONG_PASSWORD, you may log in to Kong Manager with the kong_admin username.

Otherwise, if enforce_rbac=off, you may create your first Super Admin within Kong Manager itself.

You may also use this guide to create additional Super Admins once you have an account and enforce_rbac=on.

1. Go to the “Teams” tab in Kong Manager.

2. Click “+ Invite Admin” and fill out the form.

3. Give the user the super-admin role in the default workspace.

4. Return to the “Organization” page, and in the “Invited” section, click the email address of the user in order to view them.

5. Click “Generate Registration Link”.

6. Copy the link for later use after completing the account setup.

Important: Kong Manager does not support entity-level RBAC. Run Kong Manager on a node where enforce_rbac is set to on or off, but not both.

How to Create Your First Super Admin Account Post Installation

In the event that the default kong_admin, Super Admin, was not seeded during the initial database preparation step as defined in How To Start Kong Gateway Securely, the following steps outline how to create and enable a new Super Admin post installation.

1. Follow the instructions outlined above to create a new Super Admin user account and generate a registration link.

2. Before the link generated above can be used, RBAC and GUI Authentication must be enabled. Follow the instructions on how to enable Basic Auth on Kong Manager.

3. Paste the URL in your browser and you will be asked to create a password for the newly defined Super Admin user on the Kong Manager.

4. Go to the Kong Manager homepage and you will be prompted to login with the new Super Admin credentials.