Enable the Superadmin Account

Last modified by Eleni Cojocariu on 2026/09/08 22:25

Steps

superadmin is a rescue account that bypasses the rights system entirely. It is disabled by default, because a password left behind is a security hole, so enable it only to recover a wiki whose rights have become unusable.

  1. Stop the XWiki instance.
  2. Open xwiki/WEB-INF/xwiki.cfg, uncomment the xwiki.superadminpassword property and give it a password:
    #-# Enable to allow superadmin. It is disabled by default as this could be a
    #-# security breach if it were set and you forgot about it. Should only be enabled
    #-# for recovering the Wiki when the rights are completely messed.
    xwiki.superadminpassword=system
  3. Restart the XWiki instance, then log in with superadmin as the "Username" and the password you set:

    superadmin-login.png

  4. Open the drawer and check that superadmin is the current user:

    superadmin-logged.png

FAQ

Does the user name have to be written exactly "superadmin"?

No. The match ignores case and accepts a full reference, so superadmin, XWiki.superAdmin and xwiki:XWiki.superadmin all work.

Does the account work on a subwiki?

Yes. Whichever wiki you log in from, you are authenticated as the main wiki's XWiki.superadmin.

Related

Get Connected