default user role always on "pending" #104

Closed
opened 2026-02-15 19:16:20 -05:00 by yindo · 1 comment
Owner

Originally created by @gc-appear on GitHub (Oct 14, 2025).

Hi,

I have configured opeb webui with sso+microsoft but have found some weird issues:

1 I logged in with sso to open webui page, and I become admin user by default since it is the first user, then I changed "default user role" from "pending" to "user". Then I logged out and logged in again, then I become normal user, not admin any more. "signup" is set as "enabled".

2 I tried to hard code the default user role as "user" by adding extra variable in the values file

extraEnvVars:

  • name: DEFAULT_USER_ROLE
    value: "user"

but still after login, it still shows "pending"

Any input?

Originally created by @gc-appear on GitHub (Oct 14, 2025). Hi, I have configured opeb webui with sso+microsoft but have found some weird issues: 1 I logged in with sso to open webui page, and I become admin user by default since it is the first user, then I changed "default user role" from "pending" to "user". Then I logged out and logged in again, then I become normal user, not admin any more. "signup" is set as "enabled". 2 I tried to hard code the default user role as "user" by adding extra variable in the values file extraEnvVars: - name: DEFAULT_USER_ROLE value: "user" but still after login, it still shows "pending" Any input?
yindo added the bugupstream labels 2026-02-15 19:16:20 -05:00
yindo closed this issue 2026-02-15 19:16:20 -05:00
Author
Owner

@westbrook-ai commented on GitHub (Oct 18, 2025):

Hi @gc-appear, one thing to note is that the DEFAULT_USER_ROLE variable is a persistent config, meaning that what it's set to the first time you start Open WebUI is what it will remain set to. You can see that in the docs here: https://docs.openwebui.com/getting-started/env-configuration/#default_user_role

With that said, I would expect that making that change in the UI would have the intended effect. This may be an issue in Open WebUI itself rather than the Helm charts.

I would encourage you to look through existing Issues and Discussions on the Open WebUI repo. I will also ask the other contributors if anyone has ideas on this, as I do not have SSO configured on my instance. We can keep this issue open until we confirm.

@westbrook-ai commented on GitHub (Oct 18, 2025): Hi @gc-appear, one thing to note is that the `DEFAULT_USER_ROLE` variable is a persistent config, meaning that what it's set to **the first time you start Open WebUI** is what it will remain set to. You can see that in the docs here: https://docs.openwebui.com/getting-started/env-configuration/#default_user_role With that said, I would expect that making that change in the UI would have the intended effect. This may be an issue in Open WebUI itself rather than the Helm charts. I would encourage you to look through existing [Issues](https://github.com/open-webui/open-webui/issues) and [Discussions](https://github.com/open-webui/open-webui/discussions) on the Open WebUI repo. I will also ask the other contributors if anyone has ideas on this, as I do not have SSO configured on my instance. We can keep this issue open until we confirm.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: open-webui/helm-charts#104