[GH-ISSUE #305] default user role always on "pending" #104

Closed
opened 2026-10-18 21:06:05 +00:00 by bsakaguchi · 1 comment
Owner

Originally created by @gc-appear on GitHub (Oct 14, 2025).
Original GitHub issue: https://github.com/open-webui/helm-charts/issues/305

Hi,

I have configured opeb webui with sso+microsoft but have found some weird issues:

1 I logged in with sso to open webui page, and I become admin user by default since it is the first user, then I changed "default user role" from "pending" to "user". Then I logged out and logged in again, then I become normal user, not admin any more. "signup" is set as "enabled".

2 I tried to hard code the default user role as "user" by adding extra variable in the values file

extraEnvVars:

  • name: DEFAULT_USER_ROLE
    value: "user"

but still after login, it still shows "pending"

Any input?

Originally created by @gc-appear on GitHub (Oct 14, 2025). Original GitHub issue: https://github.com/open-webui/helm-charts/issues/305 Hi, I have configured opeb webui with sso+microsoft but have found some weird issues: 1 I logged in with sso to open webui page, and I become admin user by default since it is the first user, then I changed "default user role" from "pending" to "user". Then I logged out and logged in again, then I become normal user, not admin any more. "signup" is set as "enabled". 2 I tried to hard code the default user role as "user" by adding extra variable in the values file extraEnvVars: - name: DEFAULT_USER_ROLE value: "user" but still after login, it still shows "pending" Any input?
bsakaguchi 2026-10-18 21:06:05 +00:00
Author
Owner

@james-westbrook commented on GitHub (Oct 18, 2025):

Hi @gc-appear, one thing to note is that the DEFAULT_USER_ROLE variable is a persistent config, meaning that what it's set to the first time you start Open WebUI is what it will remain set to. You can see that in the docs here: https://docs.openwebui.com/getting-started/env-configuration/#default_user_role

With that said, I would expect that making that change in the UI would have the intended effect. This may be an issue in Open WebUI itself rather than the Helm charts.

I would encourage you to look through existing Issues and Discussions on the Open WebUI repo. I will also ask the other contributors if anyone has ideas on this, as I do not have SSO configured on my instance. We can keep this issue open until we confirm.

<!-- gh-comment-id:3418602022 --> @james-westbrook commented on GitHub (Oct 18, 2025): Hi @gc-appear, one thing to note is that the `DEFAULT_USER_ROLE` variable is a persistent config, meaning that what it's set to **the first time you start Open WebUI** is what it will remain set to. You can see that in the docs here: https://docs.openwebui.com/getting-started/env-configuration/#default_user_role With that said, I would expect that making that change in the UI would have the intended effect. This may be an issue in Open WebUI itself rather than the Helm charts. I would encourage you to look through existing [Issues](https://github.com/open-webui/open-webui/issues) and [Discussions](https://github.com/open-webui/open-webui/discussions) on the Open WebUI repo. I will also ask the other contributors if anyone has ideas on this, as I do not have SSO configured on my instance. We can keep this issue open until we confirm.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
open-webui/helm-charts#104
No description provided.