goauthentik / goauthentik/authentik

akadmin account remains full admin after being deleted from authentik Admin group

Open
#25,230 0 comments 0 reactions 1 assignee Claimed by @GirlBossRush View on GitHub
bug
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 2h
Merged PRs (30d)
651

Description

### Describe the bug

If the akadmin account is removed from the group "authentik Admins" is retains full access to the administration interface/

### How to reproduce

1. Log in using the default akadmin user account
2. Create an account and add it to the authentik Admins group
3. Log out from the akadmin account
4. Log in using the newly created admin account
5. Remove akadmin from the authentik Admins group
6. Log out from the newly created account
7. Log in as akadmin
8. Click on the Admin access button

### Expected behavior

After removing the akadmin account from the authentik Admin group, I expected it to be transformed into a regular user account without access to the Administrative functions.

### Screenshots

_No response_

### Additional context

I don't want to delete this account (although it appears from other reports that it will come back anyway) as it is a useful honeypot for tracking login attempts. Additionally, it was automatically used in the creation of an LDAP outpost as the account to use for binding and this is not modifiable.

### Deployment Method

Docker

### Version

2026.8.0

### Relevant log output

```shell

```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.