Any way to create a superuser with sole admin rights? #3879

Open
opened 2026-02-05 07:45:41 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @cfschulte on GitHub (Jun 22, 2023).

Describe the feature you'd like

We now have an instance where account login and creation is handled by SSO. The default user is an editor. We would like to have a single superuser with full administrative rights that a normal user can su to if they have the correct password.

Along with this, there would be a log of who used the account and when.

Describe the benefits this would bring to existing BookStack users

Only one admin account. Stricter control of who has what privileges.

Can the goal of this request already be achieved via other means?

I currently log onto the server and temporarily change the AUTH_METHOD to standard, log out of my account and log into the admin account, make whatever change, log out. Then I turn SAML authentication back on.

Have you searched for an existing open/closed issue?

  • I have searched for existing issues and none cover my fundemental request

How long have you been using BookStack?

Not using yet, just scoping

Additional context

We are just learning BookStack, though we are planning on moving our documentation from confluence to it. So far I like it. It feels a lot "snappier" than confluence and it doesn't take ten minutes to restart after an update.

I'm trying to figure out all of the things that have been on our wishlist for a while.

Originally created by @cfschulte on GitHub (Jun 22, 2023). ### Describe the feature you'd like We now have an instance where account login and creation is handled by SSO. The default user is an editor. We would like to have a single superuser with full administrative rights that a normal user can su to if they have the correct password. Along with this, there would be a log of who used the account and when. ### Describe the benefits this would bring to existing BookStack users Only one admin account. Stricter control of who has what privileges. ### Can the goal of this request already be achieved via other means? I currently log onto the server and temporarily change the AUTH_METHOD to standard, log out of my account and log into the admin account, make whatever change, log out. Then I turn SAML authentication back on. ### Have you searched for an existing open/closed issue? - [X] I have searched for existing issues and none cover my fundemental request ### How long have you been using BookStack? Not using yet, just scoping ### Additional context We are just learning BookStack, though we are planning on moving our documentation from confluence to it. So far I like it. It feels a lot "snappier" than confluence and it doesn't take ten minutes to restart after an update. I'm trying to figure out all of the things that have been on our wishlist for a while.
OVERLORD added the 🔨 Feature Request label 2026-02-05 07:45:41 +03:00
Author
Owner

@aswgxf commented on GitHub (Oct 3, 2023):

Is creating an additional account on your SSO source not an option? My employer uses dedicated service/resource accounts for our many different applications, and individual end users / IT staff who need admin rights also have an additional admin account provisioned to them.

@aswgxf commented on GitHub (Oct 3, 2023): Is creating an additional account on your SSO source not an option? My employer uses dedicated service/resource accounts for our many different applications, and individual end users / IT staff who need admin rights also have an additional admin account provisioned to them.
Author
Owner

@cfschulte commented on GitHub (Oct 5, 2023):

Thanks Austin.

Is creating an additional account on your SSO source not an option?

Not really. We can make service mail accounts but they aren't tied to the SSO and MFA.

@cfschulte commented on GitHub (Oct 5, 2023): Thanks Austin. > Is creating an additional account on your SSO source not an option? Not really. We can make service mail accounts but they aren't tied to the SSO and MFA.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#3879