[{"data":1,"prerenderedAt":214},["ShallowReactive",2],{"\u002Fdocs\u002Fserver\u002Fusers":3},{"id":4,"title":5,"body":6,"description":206,"extension":207,"meta":208,"navigation":209,"path":210,"seo":211,"stem":212,"__hash__":213},"docs\u002Fdocs\u002Fserver\u002Fusers.md","Users & Accounts",{"type":7,"value":8,"toc":198},"minimark",[9,13,18,22,74,85,93,97,107,110,114,152,156,165,185,189],[10,11,5],"h1",{"id":12},"users-accounts",[14,15,17],"h2",{"id":16},"the-initial-admin","The initial admin",[19,20,21],"p",{},"When the server starts with an empty database, it creates one account:",[23,24,25,38],"table",{},[26,27,28],"thead",{},[29,30,31,35],"tr",{},[32,33,34],"th",{},"Field",[32,36,37],{},"Value",[39,40,41,53,65],"tbody",{},[29,42,43,47],{},[44,45,46],"td",{},"Username",[44,48,49],{},[50,51,52],"code",{},"admin",[29,54,55,58],{},[44,56,57],{},"Password",[44,59,60,61,64],{},"64 random hex characters, written to ",[50,62,63],{},"data\u002Finitial_admin_credentials"," and printed to the log",[29,66,67,70],{},[44,68,69],{},"Role",[44,71,72],{},[50,73,52],{},[75,76,83],"pre",{"className":77,"code":79,"filename":80,"language":81,"meta":82},[78],"language-text","Username: admin\nPassword: 3f9c…\n","initial_admin_credentials","text","",[50,84,79],{"__ignoreMap":82},[19,86,87,88,92],{},"Log in, open ",[89,90,91],"strong",{},"Settings"," from the user menu, set a new password and delete the credentials file.",[14,94,96],{"id":95},"changing-username-and-password","Changing username and password",[19,98,99,100,102,103,106],{},"Every user can change their own username and password under ",[89,101,91],{}," (",[50,104,105],{},"\u002Faccount\u002Fsettings",").\nLeave the password field empty to keep the current password. Usernames must be unique.",[19,108,109],{},"Changing the password does not end other active sessions.",[14,111,113],{"id":112},"sessions","Sessions",[115,116,117,143,146],"ul",{},[118,119,120,121,124,125,128,129,132,133,136,137,142],"li",{},"Logging in sets a ",[50,122,123],{},"session"," cookie that is valid for 30 days. The cookie is ",[50,126,127],{},"HttpOnly"," (scripts\non the page can't read it), ",[50,130,131],{},"SameSite=Strict"," and, in production builds, ",[50,134,135],{},"Secure",". Serve the\ndashboard over ",[138,139,141],"a",{"href":140},"\u002Fdocs\u002Fserver\u002Freverse-proxy","HTTPS",".",[118,144,145],{},"Sessions are kept in server memory. Restarting or updating the server logs everyone out.",[118,147,148,151],{},[89,149,150],{},"Log out"," in the user menu ends the session immediately.",[14,153,155],{"id":154},"roles","Roles",[19,157,158,159,161,162,142],{},"There are two roles: ",[50,160,52],{}," and ",[50,163,164],{},"user",[115,166,167,170],{},[118,168,169],{},"Agents and devices are private to the user who created them, for both roles. Admins don't see\nother users' agents or devices.",[118,171,172,173,177,178,180,181,184],{},"Through the ",[138,174,176],{"href":175},"\u002Fdocs\u002Freference\u002Fapi#update-an-account","API",", admins can edit other users' usernames\nand passwords. The first user (the initial ",[50,179,52],{},", ID ",[50,182,183],{},"1",") can also change other users' roles.",[14,186,188],{"id":187},"adding-users","Adding users",[190,191,192],"note",{},[19,193,194,195,197],{},"The current release has no user management in the dashboard, no self-registration and no\npassword reset. A self-hosted server starts with the single ",[50,196,52],{}," account, which is enough to\nmanage all of your own agents and devices.",{"title":82,"searchDepth":199,"depth":199,"links":200},2,[201,202,203,204,205],{"id":16,"depth":199,"text":17},{"id":95,"depth":199,"text":96},{"id":112,"depth":199,"text":113},{"id":154,"depth":199,"text":155},{"id":187,"depth":199,"text":188},"The initial admin account, login sessions, roles and password changes on a self-hosted NetIgnite server.","md",{},{"title":5},"\u002Fdocs\u002Fserver\u002Fusers",{"title":5,"description":206},"docs\u002Fserver\u002Fusers","wlxJF_BQq3iAoYXatZzO61OL88XeHMp2hmPb5fAwtAo",1792355946318]