Invite an Admin

    This guide describes how to invite an Admin in Kong Manager. As an alternative, if a Super Admin wants to invite an Admin with the Admin API, it is possible to do so using .

    1. Navigate to the Teams page in Kong Manager

    2. Fill out the username and email address. When a new Admin receives an invitation, they will only be able to log in with that email address. Assign the appropriate Role and click Invite User to send the invitation.

      Super Admins can invite users to multiple Workspaces, and assign them any Role available within Workspaces, including Roles that exist by default (e.g. , read-only) and Roles with customized permissions.

      The Super Admin can see all available roles across Workspaces on the Roles tab of the Organization page.

    3. On the Teams page, the new invitee will appear on the Admins list with the under Invited. Once they accept the invitation, the user will be listed in the main Admins list.

      If an email fails to send, either due to an incorrect email address or an external error, it will be possible to resend an invitation.

      If SMTP is not enabled or the invitation email fails to send, it is possible for the Super Admin to copy and provide a registration link directly.

    4. The newly invited Admin will have the ability to set a password. If the Admin ever forgets the password, it is possible for them to reset it through a recovery email.

    If a mail server is not yet set up, it is still possible to invite Admins to register and log in.

    1. Invite an Admin as described in the section above.

    If admin_gui_auth is , credentials are not stored in Kong, and the Admin will be directed to log in.

    1. Pick a user in the LDAP Directory that will be the Super Admin.

    2. Change the Super Admin’s username in Kong by making a PATCH request to admins/kong_admin and setting the value of username to the corresponding LDAP attribute.

    For example, if the LDAP user’s attribute is einstein, the to /admins/kong_admin should have a username set to einstein.

    1. Log in to Kong Manager using the LDAP credentials associated with the Super Admin.

    2. The new Admins will still receive an email, but all credentials will be handled through the LDAP server, not Kong Manager or the Admin API.