Documentation Admin Users

Admin Users

The Users admin page manages web UI accounts for the BunkerM dashboard. These are the accounts used to log in to the web interface - they are separate from MQTT client credentials.

Admin access required. Only users with the admin role can access the Users page. Regular users cannot view or modify other accounts.

What You Can Do Here

  • View all registered BunkerM web UI accounts
  • Create new accounts
  • Change any user's password
  • Change any user's role
  • Delete accounts

This page does not manage MQTT broker credentials. For MQTT client accounts, use ACL > Clients.

User Roles

Admin

Full access to everything in the BunkerM dashboard, including ACL management, monitoring, logs, all settings pages, integrations, and the ability to create, modify, and delete other user accounts.

User (Regular)

Access to monitoring, logs, MQTT browsing, and read-only views. Regular users cannot access Admin settings or manage other accounts.

Creating a New User

  1. Navigate to Admin > Users.
  2. Click Add User.
  3. Enter the user's Email address - this is their login username.
  4. Enter a Password - the user can change this after logging in.
  5. Select a Role - either admin or user.
  6. Click Save.

There is no automated email invitation. Share the credentials with the new user through a separate channel.

Changing a User's Password

  1. Find the user in the list and click Edit.
  2. Enter the new password.
  3. Click Save.

The change takes effect immediately. An existing session remains valid until it expires or the user logs out.

Changing a User's Role

  1. Find the user and click Edit.
  2. Change the Role dropdown.
  3. Click Save.
Caution: If you demote the last admin account, no one will have access to admin features. Always ensure at least one admin account exists.

Deleting a User

  1. Find the user and click Delete in the action menu.
  2. Confirm the deletion.

The account is permanently removed. If the user is currently logged in, their session is invalidated immediately. You cannot delete your own logged-in account.

Security Best Practices

  • Change the default password - the default admin@bunker.local / admin123 credentials are public. Change them immediately after setup.
  • Use strong passwords - web UI accounts protect access to your entire broker management interface.
  • Limit admin accounts - only users who need full management access should have the admin role.
  • One account per person - individual accounts give a clear audit trail of who made which changes.
  • Remove unused accounts - when someone no longer needs access, delete their account immediately.