Admin Users
The Users admin page manages web UI accounts for the BunkerM dashboard. These are the accounts used to log in to the web interface - they are separate from MQTT client credentials.
What You Can Do Here
- View all registered BunkerM web UI accounts
- Create new accounts
- Change any user's password
- Change any user's role
- Delete accounts
This page does not manage MQTT broker credentials. For MQTT client accounts, use ACL > Clients.
User Roles
Admin
Full access to everything in the BunkerM dashboard, including ACL management, monitoring, logs, all settings pages, integrations, and the ability to create, modify, and delete other user accounts.
User (Regular)
Access to monitoring, logs, MQTT browsing, and read-only views. Regular users cannot access Admin settings or manage other accounts.
Creating a New User
- Navigate to Admin > Users.
- Click Add User.
- Enter the user's Email address - this is their login username.
- Enter a Password - the user can change this after logging in.
- Select a Role - either
adminoruser. - Click Save.
There is no automated email invitation. Share the credentials with the new user through a separate channel.
Changing a User's Password
- Find the user in the list and click Edit.
- Enter the new password.
- Click Save.
The change takes effect immediately. An existing session remains valid until it expires or the user logs out.
Changing a User's Role
- Find the user and click Edit.
- Change the Role dropdown.
- Click Save.
Deleting a User
- Find the user and click Delete in the action menu.
- Confirm the deletion.
The account is permanently removed. If the user is currently logged in, their session is invalidated immediately. You cannot delete your own logged-in account.
Security Best Practices
- Change the default password - the default
admin@bunker.local/admin123credentials are public. Change them immediately after setup. - Use strong passwords - web UI accounts protect access to your entire broker management interface.
- Limit admin accounts - only users who need full management access should have the admin role.
- One account per person - individual accounts give a clear audit trail of who made which changes.
- Remove unused accounts - when someone no longer needs access, delete their account immediately.