How to create an admin user?

[perelin]

Hi all, just installed LibreChat and Im a bit confused about the instruction "On the first visit, register yourself as an admin user."

I can´t see any special option to register as an admin user.

On first visit it loads the login screen

When I go to the signup page, I get a (I guess) regular signup form

When I create a user there I can login, but it looks like regular user, no admin options (like eg user management)

What am I doing wrong?

[firmansi]

When the instance in Cloudron is ready , the first user you create for Librechat will act as Admin

[p44]

@perelin yes, as @firmansi wrote, first user you create is admin, further users you create are normal users...

[perelin]

Ok, got it! I was not able to tell this is the/an admin user - saw no real "admin" capabilities such as eg user management. But I will try explore a bit more. Thanks!

[marcusquinn]

@perelin agreed, it's not obvious. In that respect, Open WebUI is more obvious for regular and admin users.

[luckym]

@firmansi Is this also true for the first user that logs in via Cloudron OpenID or only through the create account form?

[firmansi]

@luckym only for user created through the create account form when you first time set up the Librechat, and you need to follow the sequences as instructed in Cloudron as checklist, otherwise , you might encounter issues in database

[necrevistonnezr]

The right combination:

1. DON'T LOGIN WITH CLOUDRON the first time, instead create a user the "classic way" via mail & password --> This is the admin.
2. After validation and setting up MFA, logout.
3. Now log in via Cloudron, then you are the "normal user".
4. If you want to block every login except via Cloudron, set up the env as follows (took me some trial & error):

ALLOW_EMAIL_LOGIN=false
ALLOW_REGISTRATION=false
ALLOW_SOCIAL_LOGIN=true
ALLOW_SOCIAL_REGISTRATION=false
ALLOW_PASSWORD_RESET=false
# ALLOW_ACCOUNT_DELETION=true # note: enabled by default if omitted/commented out
ALLOW_UNVERIFIED_EMAIL_LOGIN=false

Note: "SOCIAL_LOGIN" means Cloudron LDAP. If new Cloudron User should be allowed, set ALLOW_SOCIAL_REGISTRATION to true