# No warning or notification displayed while changing the admin user privilege from admin to normal.

**URL:** <https://forum.ansible.com/t/no-warning-or-notification-displayed-while-changing-the-admin-user-privilege-from-admin-to-normal/32349>\
**Category:** AWX Project\
**Created:** [February 28, 2020, 6:36am UTC](https://forum.ansible.com/t/no-warning-or-notification-displayed-while-changing-the-admin-user-privilege-from-admin-to-normal/32349 "2020-02-28T06:36:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Soniya\_panwar](https://avatars.discourse-cdn.com/v4/letter/s/22d042/32.png) [@Soniya\_panwar](https://forum.ansible.com/u/Soniya_panwar)\
**Post date:** [February 28, 2020, 6:36am UTC](https://forum.ansible.com/t/no-warning-or-notification-displayed-while-changing-the-admin-user-privilege-from-admin-to-normal/32349/1 "2020-02-28T06:36:27Z")

</div>

Hello,

While changing the admin user privileges from “Administrator” to any other type we didn’t get any warning or notification.

Also, while investigating the bug I found that the default admin user can be deleted and can have its permissions changed from “administrator” to some other type. This could lead to account hijacking considering the fact that any user with administrator role can delete or modify the default admin user.  
I wonder if this an expected behavior for the default admin user? If not, would it not be better to disable delete option and user\_type options for the default admin user?

Thanks  
Soniya

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [February 29, 2020, 11:20am UTC](https://forum.ansible.com/t/no-warning-or-notification-displayed-while-changing-the-admin-user-privilege-from-admin-to-normal/32349/2 "2020-02-29T11:20:03Z")

</div>

Hi Soniya

This isn’t a bug but you could consider it a feature request perhaps.

As with root under Linux, once you are the privileged user, you can do stupid things if you want to!

Many may want to disable the default admin account, and use named user accounts with admin rights. This is better for tracking/auditing.

You also have to trust anyone with admin rights to do sensible things. This is no different from any other OS.

Regards  
Phil.