# Manage Jenkins Access and Role Based Strategy

**URL:** <https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574>\
**Category:** Ask a question\
**Created:** [February 4, 2025, 7:12pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574 "2025-02-04T19:12:34Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Naren07](https://avatars.discourse-cdn.com/v4/letter/n/58956e/32.png) [@Naren07](https://community.jenkins.io/u/Naren07)\
**Post date:** [February 4, 2025, 7:12pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/1 "2025-02-04T19:12:34Z")

</div>

I have create role based strategy, added a admin role and assigned few users to the same. During some activity i have by mistaken removed the admin option check box. Now i am not able to access manage Jenkins. How can i retrieve it back.

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [February 4, 2025, 7:21pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/2 "2025-02-04T19:21:19Z")

</div>

See [Reset the Jenkins administrator password](https://www.jenkins.io/doc/book/system-administration/admin-password-reset-instructions/)

---

<div class="post-metadata">

**Author:** ![Naren07](https://avatars.discourse-cdn.com/v4/letter/n/58956e/32.png) [@Naren07](https://community.jenkins.io/u/Naren07)\
**Post date:** [February 4, 2025, 7:32pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/3 "2025-02-04T19:32:06Z")

</div>

Issue is not with reset password, with any user i cannot access manage Jenkins. Any way to we can access manage Jenkins

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [February 4, 2025, 7:34pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/4 "2025-02-04T19:34:14Z")

</div>

Have you read the page?  
It explains how you can disable security by modifying the config.xml so you can start from scratch

---

<div class="post-metadata">

**Author:** ![Naren07](https://avatars.discourse-cdn.com/v4/letter/n/58956e/32.png) [@Naren07](https://community.jenkins.io/u/Naren07)\
**Post date:** [February 4, 2025, 7:38pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/5 "2025-02-04T19:38:30Z")

</div>

I have gone through the video, will it impact the already existing created users?

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [February 4, 2025, 7:44pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/6 "2025-02-04T19:44:37Z")

</div>

you start from scratch with the security configuration when you do this.  
As an alternative you can also modify only the part of the config.xml that defines the the permissions and the assigned users.  
In the config.xml you should find something like this

```auto
<roleMap type="globalRoles">
      <role name="admins" pattern=".*">
        <permissions>
          <permission>hudson.model.Hudson.Read</permission>
          ...
        </permissions>
        <assignedSIDs>
          <sid type="USER">your userid</sid>
          ...
        </assignedSIDs>
      </role>

```

Here you need to add the line  
`<permission>hudson.model.Hudson.Administer</permission>` under permissions.  
Then start your Jenkins instance and you should be admin again

---

<div class="post-metadata">

**Author:** ![Naren07](https://avatars.discourse-cdn.com/v4/letter/n/58956e/32.png) [@Naren07](https://community.jenkins.io/u/Naren07)\
**Post date:** [February 4, 2025, 7:47pm UTC](https://community.jenkins.io/t/manage-jenkins-access-and-role-based-strategy/26574/7 "2025-02-04T19:47:51Z")

</div>

Thank you for the suggestion , i just added that amin but did not start my Jenkins i suppose that is the reason it is not reflecting. Let me stop and start then see if it reflects
