# Add admin user into authorized list without restart

**URL:** <https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723>\
**Category:** Support\
**Created:** [June 17, 2024, 9:32am UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723 "2024-06-17T09:32:30Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alan\_Sun](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.weaviate.io/alan_sun/32/124_2.png) [@Alan\_Sun](https://forum.weaviate.io/u/Alan_Sun)\
**Post date:** [June 17, 2024, 9:32am UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723/1 "2024-06-17T09:32:30Z")

</div>

### Description

Hi Team,  
I am using oidc for authentication which works perfect.  
One thing i noted:

```auto
apiVersion: v1
data:
  conf.yaml: |-
    ---
    authentication:
      anonymous_access:
        enabled: false
      oidc:
        enabled: true
        client_id: <client_id>
        groups_claim: groups
        issuer: https://<myiad>
        username_claim: login_name
    authorization:
      admin_list:
        enabled: true
        users:
        - P123
        - P456

    query_defaults:
      limit: 100
    debug: false
kind: ConfigMap

```

If i add another user P789, the configure map updated afterwards, the pods must be restarted to take effect.  
Is this possible to load without restart?

### Server Setup Information

```
Weaviate Server Version: 1.25.0
Deployment Method: k8s
Multi Node? Number of Running Nodes: 3
Client Language and Version: Python weaviate-client==4.5.5
Multitenancy?: no

```

### Any additional Information

---

<div class="post-metadata">

**Author:** ![DudaNogueira](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.weaviate.io/dudanogueira/32/7846_2.png) [@DudaNogueira](https://forum.weaviate.io/u/DudaNogueira)\
**Post date:** [June 17, 2024, 5:10pm UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723/2 "2024-06-17T17:10:32Z")

</div>

Hi!

Unfortunately, AFAIK, that change needs a restart 😬

Hope that helps.

THanks!

---

<div class="post-metadata">

**Author:** ![Alan\_Sun](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.weaviate.io/alan_sun/32/124_2.png) [@Alan\_Sun](https://forum.weaviate.io/u/Alan_Sun)\
**Post date:** [June 18, 2024, 1:59am UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723/3 "2024-06-18T01:59:13Z")

</div>

Hi, I saw your website saying [RBAC](https://weaviate.io/developers/weaviate/configuration/authorization#rbac) is on the way.

May i know when will it happen?

---

<div class="post-metadata">

**Author:** ![DudaNogueira](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.weaviate.io/dudanogueira/32/7846_2.png) [@DudaNogueira](https://forum.weaviate.io/u/DudaNogueira)\
**Post date:** [June 18, 2024, 4:37pm UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723/4 "2024-06-18T16:37:36Z")

</div>

Hi!

It is quite high on the roadmp list:

> **[Weaviate Core Roadmap | Weaviate - Vector Database](https://weaviate.io/developers/weaviate/roadmap)**
>
> Weaviate is an open source project that is hosted on GitHub. GitHub uses issues to request features and to track projects. This page highlights some of the issues that Weaviate is working on for upcoming releases.

Please, give it a thumbs up 👍 So we can push it up the list!

> <https://github.com/weaviate/weaviate/issues/2784>
>
> Instead of just giving users full or read-only access, assign them roles with gr…anular permissions.

Thanks!

---

<div class="post-metadata">

**Author:** ![Alan\_Sun](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.weaviate.io/alan_sun/32/124_2.png) [@Alan\_Sun](https://forum.weaviate.io/u/Alan_Sun)\
**Post date:** [June 19, 2024, 10:24am UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723/5 "2024-06-19T10:24:48Z")

</div>

Thanks for the update.  
We found a way by using istio service mesh, we can control the auth in istio service mesh but authentication by oidc.  
All good.

---

<div class="post-metadata">

**Author:** ![DudaNogueira](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.weaviate.io/dudanogueira/32/7846_2.png) [@DudaNogueira](https://forum.weaviate.io/u/DudaNogueira)\
**Post date:** [June 21, 2024, 11:20am UTC](https://forum.weaviate.io/t/add-admin-user-into-authorized-list-without-restart/2723/6 "2024-06-21T11:20:15Z")

</div>

Aha! That’s very smart! 🙂

Glad it worked out, and thanks for sharing as other users can benefit from this! 😍