🚀 Welcome to MDriven Learn –  MDriven is now on Discord!  Don’t miss the latest Release Notes.

__HIDECREDIT__

Roles and permissions

This page covers administration-account security in MDrivenServer.

Roles and permissions

Set up roles on MDrivenServer accounts to limit what an account can do. The SuperAdmin role is unlimited. Assign it only where unrestricted MDrivenServer administration is required.

Secure administrator accounts

  1. Add another administrator account to MDrivenServer so that you still have administrative access if the account named a is locked out.
  2. Set roles on accounts to limit what each account can do. SuperAdmin is unlimited.
  3. After you have at least two accounts, including a, turn off registration of new accounts on the administration page.
  4. Change account passwords and keep them secure.

The template database used for new installations has a user named a with password 123456. Change this password after installation.

You can update the password for an account whose current password you know in the MDrivenServer user interface: go to Settings/Users, select the user, and set a new password.

Avoid locking out the Turnkey account

MDrivenTurnkey uses the account named a and the password configured in APP_Data/TurnkeySettings(_extra, _override).xml. If you change the password for a, update the Turnkey configuration as well. Otherwise, Turnkey can consume the five login attempts for a and lock that account.

If an account is locked out, the recovery procedure includes setting IsLockedOut to 0 in the Admin_ASP_Users table in the MDrivenServer database. See Lost password or locked out for the complete procedure, including database-file location and restart steps.

See also