AUTHORIZER_ADMIN_PRINCIPALS does not create admin users as defined about openmetadata HOT 4 OPEN

@harshach I was pointing out the discrepancy between the docs and actual behavior. If what you describe is the expected behavior I suggest the following changes:

1. Modify docs and remove the instructions for the user:password principal.
2. Add that the default password for usernames specified in AUTHORIZER_ADMIN_PRINCIPALS are given the password admin by default.
3. Add some validation the names used in AUTHORIZER_ADMIN_PRINCIPALS so that users dont mistakenly put invalid names.

from openmetadata.

@sushi30 this is by design not set the password usign the configs. We default to admin, let the user login and change it.
This has security implications , we do not want users to update the password existing users as we do allow users promoting an existing user to admin. But changing or creating a password based on their needs is not an option.

Can we describe the use-case we do need this option

from openmetadata.

@sushi30 Sounds great.
We should also put in docs, if OpenMetadata using a SSO, it will do the user password validation and the default "admin" password will not apply there

from openmetadata.

on this topic if the user includes emails here we should throw an error, we had it happened in initialAdmins , users tend to add emails and will end up creating a user with wrong email id.

from openmetadata.