goauthentik / goauthentik/authentik
akadmin account remains full admin after being deleted from authentik Admin group
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 651
Description
### Describe the bug
If the akadmin account is removed from the group "authentik Admins" is retains full access to the administration interface/
### How to reproduce
1. Log in using the default akadmin user account
2. Create an account and add it to the authentik Admins group
3. Log out from the akadmin account
4. Log in using the newly created admin account
5. Remove akadmin from the authentik Admins group
6. Log out from the newly created account
7. Log in as akadmin
8. Click on the Admin access button
### Expected behavior
After removing the akadmin account from the authentik Admin group, I expected it to be transformed into a regular user account without access to the Administrative functions.
### Screenshots
_No response_
### Additional context
I don't want to delete this account (although it appears from other reports that it will come back anyway) as it is a useful honeypot for tracking login attempts. Additionally, it was automatically used in the creation of an LDAP outpost as the account to use for binding and this is not modifiable.
### Deployment Method
Docker
### Version
2026.8.0
### Relevant log output
```shell
```
Contributor guide
Assessment
This issue has not been assessed yet.