How to grant Admin access on self-hosted Adobe Commerce On-premises
For self-hosted Adobe Commerce On-premises, Adobe cannot log in to your servers or Magento Admin to create accounts or change passwords. Only someone who already has Admin access, or someone with SSH access to the server hosting the application, can grant Magento Admin access. This article describes how an organization administrator can add Admin users from the Admin UI or create them with the Commerce CLI.
Description description
Environment
- Product: Adobe Commerce On-premises
- Constraint: Self-hosted deployment (customer-managed infrastructure and credentials)
Issue/Symptoms
- There is a need to grant Magento backend admin access to specific email addresses.
- There is no direct way for Adobe to create or modify admin users for self-hosted environments.
- Assistance is being requested from Adobe to perform admin user management tasks.
Cause
On self-hosted On-premises deployments, you operate the servers, network, and credentials. Adobe does not host the application, does not hold your Admin passwords, and cannot sign in to your environment. Magento Admin accounts can be created or changed only from inside that environment: by an existing Admin user through the Admin UI, or by someone with shell access to the application root who can run the Commerce CLI. There is no separate Adobe-controlled path to grant or reset Admin access for self-hosted instances.
Resolution resolution
Use one of the following methods, depending on who still has access to your instance.
Method 1 - An existing Admin user can sign in
If at least one Admin account is active, that user can add or update Admin users from the Admin UI.
- Sign in to the Magento Admin with an existing Admin account.
- Go to System
>Permissions>All Users. - To add a user, select Add New User. To change an existing account, open the user in the grid.
- Complete the account details, assign a User Role with the right permissions, then save.
- Confirm that each intended user can sign in with the new or updated credentials.
Method 2 - SSH access to the application server
If no Admin can sign in but you (or your hosting provider) can reach the server over SSH, create an Admin user with the Commerce command-line interface.
- Connect with SSH to the server that hosts the instance.
- Change directory to the Commerce application root (for example,
/var/www/htmlor/httpdocs/, depending on your host). - Run
./bin/magento admin:user:createand follow the prompts, or run./bin/magento admin:user:create --helpto see required arguments for your version. If your environment expects it, run the same command through PHP (for example,php bin/magento admin:user:create). - Sign in to the Admin with the new credentials and assign or verify roles under System
>Permissions>User Roles as needed.
Note: Rely on internal administrators, your hosting partner, or your organization’s recovery procedures when Admin access must be restored. Adobe cannot perform these steps on your self-hosted infrastructure.