Enable the Superadmin Account
Last modified by Eleni Cojocariu on 2026/09/08 22:25
Steps
superadmin is a rescue account that bypasses the rights system entirely. It is disabled by default, because a password left behind is a security hole, so enable it only to recover a wiki whose rights have become unusable.
- Stop the XWiki instance.
- Open xwiki/WEB-INF/xwiki.cfg, uncomment the xwiki.superadminpassword property and give it a password:
#-# Enable to allow superadmin. It is disabled by default as this could be a #-# security breach if it were set and you forgot about it. Should only be enabled #-# for recovering the Wiki when the rights are completely messed. xwiki.superadminpassword=system - Restart the XWiki instance, then log in with superadmin as the "Username" and the password you set:

- Open the drawer and check that superadmin is the current user:

FAQ
Does the user name have to be written exactly "superadmin"?
No. The match ignores case and accepts a full reference, so superadmin, XWiki.superAdmin and xwiki:XWiki.superadmin all work.
Does the account work on a subwiki?
Yes. Whichever wiki you log in from, you are authenticated as the main wiki's XWiki.superadmin.