First Administrator and Verification

The first active verified account is provisioned as SUPER_ADMIN. Existing verified accounts missing their hidden personal project space are repaired on successful login.

Normal setup

1. Open the HTTPS Kinoder URL.
2. Create an account.
3. Open the verification email and verify the address.
4. Complete onboarding.
5. Confirm the administrator navigation is available.

Recovery promotion

When bootstrap or recovery requires it, run from the backend repository:

docker compose exec api npm run admin:promote -- [email protected] SUPER_ADMIN

Use ADMIN instead when full publication authority is unnecessary. The command validates the account and records an audit event.

Verification checklist

• frontend and readiness endpoints respond over HTTPS;
• sign-up, verification, login, logout, and recovery email work;
• the personal workspace exists;
• the final active super administrator cannot be removed;
• API, worker, PostgreSQL, Redis, and object storage are healthy;
• audit events are recorded;
• enabled providers pass their own safe validation;
• disabled or zero-priced provider work remains unavailable.

IMAGE PLACEHOLDER - First administrator Replace with a sanitized administrator landing page showing successful setup. Recommended size: 1600 x 900 px.