Manage the built-in administrator

Automation orchestrator provisions a built-in administrator account at deployment. This account uses local authentication and is not connected to any external identity provider.

The built-in administrator account:

• Has full application access, bypassing the policy system entirely.
• Can configure external identity providers.
• Can manage users and sessions.
• Can access all API endpoints.
• Serves as a recovery mechanism if external identity providers fail.

Automation orchestrator reads the administrator password from the file that the APP_ADMIN_PASSWORD_PATH environment variable specifies. Automation orchestrator hashes the password with Argon2id before storage. Contact your platform administrator if you do not have these credentials.

You must configure APP_ADMIN_PASSWORD_PATH to set a password for the built-in administrator account. Without a password, the account cannot be used for local login.