I have searched all existing open AND closed issues and discussions for similar requests. I have found none that is comparable to my request.
Problem Description
Currently, OpenWebUI only supports a single global admin role. This limits scalability when deploying the platform for multiple organizations within the same instance.
There is no way to assign group-level administrators who can manage their own organization’s users, settings, and permissions independently. As a result, the global admin must handle all user and group management tasks, which is inefficient and not suitable for multi-tenant environments.
Desired Solution you'd like
We need to introduce a group-level admin feature in OpenWebUI.
The global admin should be able to designate one or more members within a group as group admins, who will have admin-like permissions — but only within their own group.
Each group admin should be able to:
Manage users, roles, and settings within their assigned group (similar to how the global admin manages the entire instance).
Optionally be configured to register new users and automatically assign them to their group upon registration.
The goal is to enable multi-organization management within a single OpenWebUI instance.
Each organization will have its own group and group-level admin(s) who can independently manage their own users and configurations without requiring intervention from the global admin.
Alternatives Considered
No response
Additional Context
No response
Originally created by @Alireza3242 on GitHub (Oct 25, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/18614
### Check Existing Issues
- [x] I have searched all existing open AND closed issues and discussions for similar requests. I have found none that is comparable to my request.
### Problem Description
Currently, OpenWebUI only supports a single global admin role. This limits scalability when deploying the platform for multiple organizations within the same instance.
There is no way to assign group-level administrators who can manage their own organization’s users, settings, and permissions independently. As a result, the global admin must handle all user and group management tasks, which is inefficient and not suitable for multi-tenant environments.
### Desired Solution you'd like
We need to introduce a group-level admin feature in OpenWebUI.
The global admin should be able to designate one or more members within a group as group admins, who will have admin-like permissions — but only within their own group.
Each group admin should be able to:
Manage users, roles, and settings within their assigned group (similar to how the global admin manages the entire instance).
Optionally be configured to register new users and automatically assign them to their group upon registration.
The goal is to enable multi-organization management within a single OpenWebUI instance.
Each organization will have its own group and group-level admin(s) who can independently manage their own users and configurations without requiring intervention from the global admin.
### Alternatives Considered
_No response_
### Additional Context
_No response_
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @Alireza3242 on GitHub (Oct 25, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/18614
Check Existing Issues
Problem Description
Currently, OpenWebUI only supports a single global admin role. This limits scalability when deploying the platform for multiple organizations within the same instance.
There is no way to assign group-level administrators who can manage their own organization’s users, settings, and permissions independently. As a result, the global admin must handle all user and group management tasks, which is inefficient and not suitable for multi-tenant environments.
Desired Solution you'd like
We need to introduce a group-level admin feature in OpenWebUI.
The global admin should be able to designate one or more members within a group as group admins, who will have admin-like permissions — but only within their own group.
Each group admin should be able to:
Manage users, roles, and settings within their assigned group (similar to how the global admin manages the entire instance).
Optionally be configured to register new users and automatically assign them to their group upon registration.
The goal is to enable multi-organization management within a single OpenWebUI instance.
Each organization will have its own group and group-level admin(s) who can independently manage their own users and configurations without requiring intervention from the global admin.
Alternatives Considered
No response
Additional Context
No response