---
title: "Managing Managers"
slug: "managing-managers"
tags: ["5.5"]
updated: 2026-10-27T23:00:54Z
published: 2026-10-27T23:00:54Z
canonical: "docs.vastdata.com/managing-managers"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Managers

## Overview of Management Users

VAST Management System (VMS) users are called *managers*.

> [!NOTE]
> Note
> 
> The term 'users' in VMS interfaces, refers to client-side storage users.

For default VMS user accounts and credentials, see [Managing VAST Cluster Passwords](/docs-5-5/docs/managing-vast-cluster-passwords).

After using the default manager for the first time login, you can change its password and create additional managers with any permissions you choose to assign. The default manager cannot be deleted and its permissions cannot be reduced.

> [!NOTE]
> Note
> 
> There is also an option to enable VMS login with external provider identities. This is done through roles. See [Managing Administrative Roles](/docs-5-5/docs/managing-administrative-roles).

- [Managing Managers via VAST Web UI](/docs-5-5/docs/managing-managers#managing-managers-viavast-web-ui)
- [Managing Managers via CLI](/docs-5-5/docs/managing-managers#managing-managers-via-cli)

## Managing Managers via VAST Web UI

- [Viewing Managers](/docs-5-5/docs/managing-managers#viewing-managers)
- [Adding Managers](/docs-5-5/docs/managing-managers#adding-managers)
- [Modifying Managers](/docs-5-5/docs/managing-managers#modifying-managers)
- [Cloning Managers](/docs-5-5/docs/managing-managers#cloning-managers)
- [Deleting Managers](/docs-5-5/docs/managing-managers#deleting-managers)

### Viewing Managers

From the left navigation menu, select Administrators and then Managers.

The list shows:

- The manager's user name.
- The manager's first name and last name, if it was provided.
- The roles assigned to the manager. The manager inherits permissions from these roles.
- The tenant with which the manager is associated.
- Whether the manager is active.
- Whether the manager is predefined in the cluster. (Predefined managers cannot be deleted.)

### Adding Managers

1. From the left navigation menu, select Administrators and then Managers.
2. Click Create Managers.
3. In the **Add Manager** dialog, complete the manager's details:
  - Username (required)

The user name for login.
  - First Name

The manager's first name.
  - Last Name

The manager's last name.
  - Password (required)

Enter a password for the manager.
  - Verify Password (required)

Enter the same password you entered in the Password field.
  - Password Doesn't Expire

Enable this setting to prevent the manager's password from expiring if password expiration is enabled in VMS settings.
  - Password is Temporary

Enable this setting to specify that the password is temporary. The manager will need to set a new password within the temporary password expiration period, which is seven days by default.
  - User type

Select the type of manager:
    - Cluster Admin - an admin user for the entire cluster. This user can log into the cluster VMS web UI URL and the VMS CLI, and authenticate to the VMS REST API. They can perform actions relating to the entire cluster.
    - Tenant Admin - an admin user for a specific tenant in the cluster. This user can log into a specific VMS web UI URL for a tenant. They can also authenticate to the REST API to manage resources specific to the tenant. For this option, Tenant must also be specified.
  - Tenant

Select the tenant, if User type is *Tenant Admin*.
  - Available Roles

Select each role you want to assign from the drop down list. When you select a role, the role is added to the Current Roles list just below the field and the permissions inherited from the role are added to the permissions table lower down.

To remove a role, click the little remove button (![remove_role.png](https://cdn.us.document360.io/89b91113-5dc6-49db-86ec-57b16dc8ce56/Images/Documentation/img-61d21793cde09ebc30c1eafacb0adf9d(12).png?sv=2026-02-06&spr=https&st=2026-11-08T09%3A15%3A00Z&se=2026-11-08T10%3A15%3A00Z&sr=c&sp=r&sig=4COBDnvgdueGHuoageV3tPwPX65fyLER3dgZAx%2BfXPU%3D)) for each current role.
4. Assign the manager permissions by selecting each permission in the grid that you want to enable.
5. When you're done, click Create. The new manager is added.

### Modifying Managers

Modify a manager to change the manager's password or permissions.

1. From the left navigation menu, select Administrators and then Managers.
2. In the Managers page, right-click the manager you want to modify, and select Edit.
3. Make your changes in the **Update Manager** dialog. See [Adding Managers](/docs-5-5/docs/managing-managers#adding-managers) for help. To leave the password unchanged, leave the password fields blank.
4. Click Update.

### Cloning Managers

You can create a copy of an existing VMS manager account and open it for editing:

1. From the left navigation menu, select Administrators and then Managers.
2. In the Managers page, right-click the manager you want to clone, and select Clone and Edit.

VAST Cluster creates a new manager user and displays the Update Manager dialog for it. In the dialog, an automatically generated one-time password is set for the newly created manager.
3. Make changes in the **Update Manager** dialog as needed.
4. Click Update to save your changes.

### Deleting Managers

You cannot delete the default manager (*admin*).

1. From the left navigation menu, select Administrators and then Managers.
2. Right-click the manager you want to delete, and select Remove.
3. Click Yes to confirm the removal.

### Unlocking Managers

Managers can become locked out after a configured number of login failures, depending on VMS password settings, or when their password expires. This procedure unlocks a manager and sets a new password.

1. From the left navigation menu, select Administrators and then Managers.
2. In the Managers page, right-click the manager you want to modify and select Unlock.
3. Enter a new password for the manager in the Password field, and retype the same password in the Retype Password field.
4. Choose whether to leave the Password is Temporary setting enabled or to disable it. Leaving it enabled will require the manager to reset the password within the temporary password expiration period (which is seven days by default).
5. Click Update.

## Managing Managers via CLI

To manage managers via the [CLI](/docs-5-5/docs/using-the-vast-cli), use the following commands.

> [!TIP]
> Tip
> 
> For full CLI command syntax, including VAST arguments, enter the command at the CLI prompt in the *<command> <subcommand>* format provided in the table, followed by *?*.

| Task | Command |
| --- | --- |
| Display all managers | [manager list](/docs-5-5/docs/manager-list) |
| Display a manager | [manager show](/docs-5-5/docs/manager-show) |
| Add a manager | [manager create](/docs-5-5/docs/manager-create) |
| Modify a manager | [manager modify](/docs-5-5/docs/manager-modify) |
| Delete a manager | [manager delete](/docs-5-5/docs/manager-delete) |
| Unlock a manager | [manager unlock](/docs-5-5/docs/manager-unlock) |
| Assign a role to a manager | [manager join](/docs-5-5/docs/manager-join) |
| Remove a role from a manager | [manager leave](/docs-5-5/docs/manager-leave) |
| Assign realm (or object) permissions to a manager | [manager assign](/docs-5-5/docs/manager-assign) |
| Remove realm (or object) permissions from a manager | [manager unassign](/docs-5-5/docs/manager-unassign) |