Locked out of instance
🔬Roles & Permissions🪵Login🪲Bugs❓Question✅Solved
Hey!
Hoping someone here (ideally someone from Zitadel) can help me out, I've somehow lost admin access to my own Zitadel Cloud instance and I'm stuck.
Here's exactly what happened, as best I can tell:
- I created this instance a while ago with my email, it's the one saved in my password manager from when I set it up, and it was the instance owner (IAM_OWNER).
- I then created a project and added that same email (the one I use as the instance admin) as a user/admin on the project.
- After that, when I sign in and open the console, it just drops me on my own profile page, /ui/console/users/me?id=general, with no admin or management UI at all.
So it really looks like my user lost its IAM_OWNER role. A few more details:
- It's the only account with that email, if I try any other email it says "User not found in the system"
- "Manage Instance" from the Customer Portal (I'm the owner there) sends me to the same /users/me page.
- I'm on the Basic plan so I can't open a support ticket, and I tried re-granting IAM_OWNER through the Admin API with a service-user PAT, but it only has IAM_USER_MANAGER so I get permission denied.
Is there anyone who can help me get my instance-owner role back? And if possible, could someone check the event/audit log for when IAM_OWNER was removed from my user, I never removed it on purpose, so I'm wondering if adding my admin email to a project as a user somehow caused it. Feels like it might be a bug?
Happy to share my instance domain and user ID in DM. Thanks so much
Hoping someone here (ideally someone from Zitadel) can help me out, I've somehow lost admin access to my own Zitadel Cloud instance and I'm stuck.
Here's exactly what happened, as best I can tell:
- I created this instance a while ago with my email, it's the one saved in my password manager from when I set it up, and it was the instance owner (IAM_OWNER).
- I then created a project and added that same email (the one I use as the instance admin) as a user/admin on the project.
- After that, when I sign in and open the console, it just drops me on my own profile page, /ui/console/users/me?id=general, with no admin or management UI at all.
So it really looks like my user lost its IAM_OWNER role. A few more details:
- It's the only account with that email, if I try any other email it says "User not found in the system"
- "Manage Instance" from the Customer Portal (I'm the owner there) sends me to the same /users/me page.
- I'm on the Basic plan so I can't open a support ticket, and I tried re-granting IAM_OWNER through the Admin API with a service-user PAT, but it only has IAM_USER_MANAGER so I get permission denied.
Is there anyone who can help me get my instance-owner role back? And if possible, could someone check the event/audit log for when IAM_OWNER was removed from my user, I never removed it on purpose, so I'm wondering if adding my admin email to a project as a user somehow caused it. Feels like it might be a bug?
Happy to share my instance domain and user ID in DM. Thanks so much
