Assigning an Initial System Administrator

By default, SystemLink Enterprise users initially have minimal permissions and cannot make changes to the system.

At installation, you must assign an initial administrator by defining a mapping for a specific Open ID Connect claim. The administrator will be able to log in, perform initial configuration of the application, and assign roles to other users.
  1. In systemlink-values.yaml, set initialAdministratorMapping.mappingKey to the claim to use. The default is email.
  2. Set initialAdministratorMapping.mappingValue to the value that identifies the administrator. For example, set the value to john.doe@myorganization.org to make the user with that email address the initial system administrator.
    Note If you configure a mapping that applies to multiple users, all selected users will have administrator access to the cluster.
After the initial install, use the SystemLink Enterprise application for all future user management. NI recommends removing the mapping configuration from systemlink-values.yaml once the application is working. Removing the mapping configuration helps you avoid accidentally re-applying an unwanted mapping in the future. You can assign an administrator during an upgrade by setting the initialAdministratorMapping.createOnUpgrade value to true.