- Getting started
- Best practices
- Tenant
- About the Tenant Context
- Searching for Resources in a Tenant
- Managing Robots
- Connecting Robots to Orchestrator
- Storing Robot Credentials in CyberArk
- Storing Unattended Robot Passwords in Azure Key Vault (read only)
- Storing Unattended Robot Credentials in HashiCorp Vault (read only)
- Storing Unattended Robot Credentials in AWS Secrets Manager (read only)
- Deleting Disconnected and Unresponsive Unattended Sessions
- Robot Authentication
- Robot Authentication With Client Credentials
- SmartCard Authentication
- Configuring automation capabilities
- Audit
- Settings - Tenant Level
- Resource Catalog Service
- Folders Context
- Automations
- Processes
- Jobs
- Triggers
- Logs
- Monitoring
- Queues
- Assets
- Storage Buckets
- Orchestrator testing
- Other Configurations
- Integrations
- Host administration
- Organization administration
- Troubleshooting

Orchestrator user guide
Managing system administrators
linkSystem administrators, also known as host administrators, have the required privileges to configure all host-level settings, which apply for all your organizations and tenants.
First system administrator
linkAfter completing the installation, the admin user account is automatically provisioned which has system administrator privileges.
Where can I get the credentials?
admin
, and the password is the one you set during installation. For details refer to the installation docs: Windows installer - wizard (UI) | Windows installer - command line (CLI) | Azure - script.You can use this account to log in to the host portal. If needed, with this account you can create additional system administrator accounts.
Adding a system administrator
linkWhen adding system administrators, you can create a local account for them, or add a directory account.
- Log in to the Management portal with a system administrator account.
The Management portal opens.
- Select the Users tab from the menu on the left.
- Select Add User in the top right of the page.
The Add User panel opens from the right of the window.
- If the new account will use their username and password (basic authentication) to log in, fill in the password for the account. The system administrator may be required to reset their password on first login, depending on your security settings.
- If the new account will log in with Google or Microsoft Entra ID, you must fill in the email and it should match the one tied to their account in the external provider.
- For a new log in via SAML, the fields will match the selected SAML user mapping. If the user mapping is set to by user email, then the email must be filled in. If the user mapping is set to by username, then the username must match the username in the SAML identity provider.
- For a new log in via Windows Authentication (Active Directory), the username must be of the form
user@domain
- for example,john.doe@uipath
.
- Fill in the fields with the details for the new system administrator account.
You are required to define the password for the account. The system administrator may be required to reset their password on first login, depending on your security settings.
- Select Save to create the account and close the panel.
The new account is now displayed in the users list.
An email notification is sent to the provided email address if host-level SMTP settings have been configured. Depending on your security settings, the new system administrator may be required to confirm their email address.
- Provide the username (or email address) and password you provided for the account to the new system administrator so that they can log in.
Editing account details
linkAs a system administrators, you can change the details of another system administrator account, including the account password.
To edit account details of an existing system administrator account:
- Log in to the host portal with a system administrator account. The host portal opens.
- Select Users. The Users page opens displaying the list of system administrators.
- Select the Edit icon at the right end of the account row. The Edit User panel opens from the right of the window.
- Edit the information as needed.
- Select Save to apply your changes and close the panel.
Deleting system administrator accounts
linkAs a system administrator, you can delete system administrator accounts to prohibit a user from accessing the host portals.
To remove a system administrator account:
- Log in to the host portal with a system administrator account. The host portal opens.
- Select Users. The Users page opens displaying the list of system administrators.
- Select the Delete icon at the right end of the account row.
- In the confirmation dialog, select Delete to confirm the action.
The account is removed from the users list and can no longer log in to the host portal.