Skip to main content

User Management

Kerrigan uses local users for administration and write access. Anonymous users can view much of the dashboard, but changing system settings, managing devices, downloading images, and creating users requires a System Admin session.

First Admin​

On a fresh install, Kerrigan requires an initial admin account. Open the dashboard and create the first System Admin when prompted.

The API flow is:

GET  /v1/auth/status
POST /v1/auth/bootstrap

/v1/auth/bootstrap is only accepted while no users exist.

Add Users​

In the dashboard:

  1. Sign in as a System Admin.
  2. Open System.
  3. Select Users.
  4. Create a user with a username, password, display name, optional email, and role.

Roles:

  • system_admin: can manage users, system integrations, images, and devices.
  • user: reserved for lower-privilege workflows and future identity mapping.

Passwords must be at least eight characters.

Delete Users​

System Admins can delete users from the Users tab. Kerrigan prevents two unsafe operations:

  • deleting the currently signed-in user
  • deleting the last remaining System Admin

Sessions​

Successful login creates an HTTP-only kerrigan_session cookie. Sessions expire after seven days. Logout deletes the current session.

Relevant API endpoints:

POST   /v1/auth/login
POST   /v1/auth/logout
GET    /v1/auth/users
POST   /v1/auth/users
DELETE /v1/auth/users/{username}