<![CDATA[How do I grant admin UI access to users in FusionAuth?]]>I'm trying to give a colleague access to the FusionAuth admin UI, but they're unable to log in even after I created a user account for them. I created the user in a custom tenant and registered them for an application, but login still fails with invalid credentials.

What's the correct way to grant admin UI access to additional users? Should the user be created in a specific tenant, and which application do they need to be registered to?

]]>https://fusionauth.io/community/forum/topic/3186/how-do-i-grant-admin-ui-access-to-users-in-fusionauthRSS for NodeThu, 08 Oct 2026 01:21:04 GMTThu, 01 Oct 2026 18:50:37 GMT60<![CDATA[Reply to How do I grant admin UI access to users in FusionAuth? on Thu, 01 Oct 2026 18:50:48 GMT]]>Now I have enough information to improve the answer. Let me create an enhanced version with documentation links.

To grant a user access to the FusionAuth admin UI, you need to:

  1. Create the user in the Default tenant (not a custom tenant)
  2. Register them for the FusionAuth application (the built-in admin application)
  3. Assign them an appropriate admin role during registration (e.g. "admin" for full access or a more limited role)

The key distinction is that the Tenant Manager Application is intended for granting third-party users limited admin access to manage users and identity providers within a specific tenant (this is an Enterprise feature). For full admin UI access, you must use the FusionAuth application in the Default tenant.

If the user's password setup email is being filtered as spam, you can set a temporary password manually and they'll be prompted to change it on first login.

Steps to add an admin user:

  1. Navigate to Users in the Default tenant
  2. Create a new user or select an existing one
  3. Go to the Registrations tab
  4. Click Add registration
  5. Select the FusionAuth application
  6. Choose the appropriate admin role from the dropdown
  7. Save the registration

Available Admin Roles

Here are the main admin UI roles you can assign:

Role Description
admin Can manage everything, including creating new users with administrator privileges
user_support_manager Limited scope — recommended for tier 1 support staff
user_support_viewer Can view user information only
user_manager Can add and edit users (note: this role has similar power to admin, so use user_support_manager for restricted access)
user_deleter Can delete users

Important: A user must have a registration in the FusionAuth application to access the admin UI — group membership alone is not sufficient.

Related Documentation

]]>https://fusionauth.io/community/forum/post/8709https://fusionauth.io/community/forum/post/8709Thu, 01 Oct 2026 18:50:48 GMT