Change the built-in admin user's password
Users
Change Admin Password
Syteca ACB REST API endpoint to rotate the built-in admin user’s password — for automated rotation from external secrets vaults, CMDB, or compliance workflows.
PUT
Change the built-in admin user's password
Rotates the built-in
admin user’s password. The new password takes effect immediately — subsequent admin logins must use the new value. Call Verify admin password first to confirm the stored value in your vault is the current one before triggering this change.
For ACB deployments updated from a version prior to 1.2, switch to the
https://{hostname}/EkranACB server in the Playground.Permissions required
- The Access Token must be issued to an Internal or Active Directory user (not an Application Account) with the administrative User Management permission.
- The Refresh Token holder should not be the built-in
adminuser itself.
Password policy
The new password must meet the Syteca password policy — failing the policy returns 400 Bad Request with the specific violation in the response body. Typical requirements include minimum length, character classes, and disallowing recently-used passwords.Rate limit
5 requests per minute per Access Token.Errors
See Status codes. Common errors:- 400 Bad Request — new password does not meet the Syteca password policy.
- 401 Unauthorized — invalid or expired Access Token.
- 403 Forbidden — user lacks administrative User Management permission.
Related
Admin password rotation
Concept page — how verify + change work together.
Verify admin password
Step 1 — confirm sync before rotating.
API reference
Authentication, status codes.
Password policy
The policy your new password must meet.
Authorizations
Access token for authentication
Body
application/json
Response
Password changed successfully