Default Grafana admin deprecation
We would like to inform you that the Observability default Grafana admin user, created during instance provisioning, is now deprecated and will be removed on January 11, 2027, if the credentials have not been changed. From this date on, also the creation of a default admin user for new instances will no longer be supported.
For security reasons, we recommend removing this default user right now and using STACKIT SSO (or your own SSO provider) instead. More information about Grafana SSO can be found in the Configure Grafana Access documentation. To remove this default user, we have introduced a new attribute in the Observability API instance update endpoint and a new button in the Portal (coming soon).
Additionally, you can already decide whether the default admin user should be created during provisioning. We have added a corresponding attribute in the Observability API instance creation endpoint as well as a new dialog in the Portal provisioning flow (coming soon).
Please be aware that once the default admin user is removed or the creation of it is skipped, it cannot be recreated via the API or the Portal. However, it will still be possible to manually create basic auth users in the Grafana UI.
Another benefit of removing the default admin is that it frees up a user slot. This allows you to utilize the full user limit defined in your plan (e.g. all 5 slots of the smallest plan) for real users via SSO.