---
component: ROOT
version: "2026.1"
slug: ROOT/administration/system-user
canonical_url: "https://docs.gradle.com/develocity/2026.1/administration/access-control/system-user/"
title: "System User"
description: "Details about the built-in system user account for bootstrapping and emergency access."
keywords: []
status: current
---

<!-- llms-index: https://docs.gradle.com/develocity/llms.txt -->

# System User

<a id="preamble"></a>

The `system` user provides a built-in local administrator account that bootstraps new installations and provides emergency access if external authentication (SAML/LDAP) fails.

<a id="capabilities"></a>

## Account Capabilities

The `system` user is hard-coded with critical administrative permissions, including:

*   Configure access control and identity providers.
    
*   Manage operational settings (email, storage, etc.).
    
*   Configure Edge nodes and Test Distribution.
    
*   Generate support bundles for troubleshooting.
    

> [!WARNING]
> For routine management, avoid using the system user. Instead, use it only to create personal administrator accounts with the Administrator role. Securely store the system password in a password manager or vault.

<a id="accessing-the-system-user"></a>

## Accessing the System User

When you first log in as the `system` user, you must change the default, randomly generated password.

<a id="tabs-1"></a>

*   <a id="tabs-1-new-installation"></a>
    
    New Installation
    
*   <a id="tabs-1-existing-installation"></a>
    
    Existing Installation
    
*   <a id="tabs-1-unattended-gitops"></a>
    
    Unattended (GitOps)
    

<a id="tabs-1-new-installation--panel"></a>

Obtain the one-time default password using the methods in the [Obtaining the Default Password](#obtaining-the-password) section.  
**Note:** This password is for one-time use only and is invalidated as soon as you set a custom password.

<a id="tabs-1-existing-installation--panel"></a>

Sign in with the custom password created during the initial bootstrap. If this password is lost, you must [reset it via the CLI](#reset-password).

<a id="tabs-1-unattended-gitops--panel"></a>

If you defined a password in your `values.yaml` file during installation, use that value to log in. You won’t be prompted to change it unless the configuration is modified.

<a id="changing-the-system-user-password-via-the-ui"></a>

## Changing the System User Password via the UI

To change the system user password in the Develocity UI:

1.  Log in to Develocity as a user with **Administrator** permissions.
    
2.  Navigate to **Administration**  **Access control**  **System user**.
    
3.  Enter the current password and the new password, confirm the new password, then click **Save** to update it.
    

![System User Password Change in Develocity UI](https://docs.gradle.com/develocity/2026.1/administration/access-control/system-user/../../_images/dv-ui-system-user.png)

System User Password Change in Develocity UI

<a id="configuration-fields"></a>

### Configuration Fields

<table class="tableblock frame-all grid-all stretch"><colgroup><col style="width: 25%;"> <col style="width: 75%;"></colgroup><tbody><tr><td class="tableblock halign-left valign-top">Setting</td><td class="tableblock halign-left valign-top">Description</td></tr><tr><td class="tableblock halign-left valign-top">Current password</td><td class="tableblock halign-left valign-top">The existing password for the system user. This is required to authenticate the change.</td></tr><tr><td class="tableblock halign-left valign-top">New password</td><td class="tableblock halign-left valign-top">The new password you want to set for the system user. It must meet the system’s password complexity requirements.</td></tr><tr><td class="tableblock halign-left valign-top">New password confirm</td><td class="tableblock halign-left valign-top">Re-enter the new password to confirm it matches the intended value.</td></tr></tbody></table>

> [!NOTE]
> Users with the Configure access control permission can also reset the system user password directly through the UI by navigating to Administration  Access control  System user.

<a id="obtaining-the-password"></a>

## Obtaining the Default Password

If you don’t have a custom password yet, use one of the following methods to retrieve the system-generated default.

<a id="using-develocityctl"></a>

### Using `develocityctl`

The [Develocity CLI](https://docs.gradle.com/develocity/develocityctl/1.22/) is the _recommended method_ and provides the most direct way to retrieve or reset the password:

**Get the Current Default Password:**

```
develocityctl system get-default-system-password
```

**Reset to a New Value:**

```
develocityctl system reset-system-password
```

<a id="using-kubectl"></a>

### Using `kubectl`

If you have access to the Kubernetes cluster, you can decode the secret directly:

**Retrieve Secret from Kubernetes:**

```
kubectl -n develocity get secret gradle-default-system-password-secret --template={{.data.password}} | base64 --decode
```

<a id="finding-it-in-logs"></a>

### Finding It in Logs

The `develocity-app` pods log the password during their initial startup. Search your log aggregator for the string: `Using default system password:`

<a id="reset-password"></a>

## Resetting a Lost Password

If you’re locked out without the custom password, you can force a reset using the [Develocity CLI `system` command](https://docs.gradle.com/develocity/develocityctl/1.22/commands/#system). This doesn’t require the current password.

**Reset System Password:**

```
develocityctl system reset-system-password
```