# Can shield setup a defalut pass for admin for 2.3.2? **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [April 11, 2016, 10:22am UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975 "2016-04-11T10:22:45Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![makeyang](https://avatars.discourse-cdn.com/v4/letter/m/f05b48/32.png) [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Post date:** [April 11, 2016, 10:22am UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975/1 "2016-04-11T10:22:45Z")
since rest API to manipulate users/roles, so is it possible to add a well-known password for admin to operation everything and forget about esusers at all? ---
**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\ **Post date:** [April 11, 2016, 11:55am UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975/2 "2016-04-11T11:55:25Z")
In 2.3, a good practice would be to use esusers to create an admin user. Then use that admin user to create a native admin user via the API. At that point, you could remove the esusers admin, and continue using the native admin user. In future versions of the stack, we are planning to have a built-in administrator user in the native realm, which will remove the requirement of using the esusers realm unless you choose to. ---
**Author:** ![makeyang](https://avatars.discourse-cdn.com/v4/letter/m/f05b48/32.png) [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Post date:** [April 12, 2016, 1:34am UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975/3 "2016-04-12T01:34:57Z")
the build-in administarator user is exactly what I want. so I'd like to ask when will be the future versions you are talking about? is it possible for 2.3.2? ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [April 12, 2016, 11:47am UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975/4 "2016-04-12T11:47:54Z")
It will not be coming in a 2.3.x version; we have chosen not to add this in a minor release and definitely not a bug fix release. Adding a new user to a system that someone upgrades could open up a security hole if they are not aware of the new user and I believe the risk is much greater for that to happen in a minor release. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:45pm UTC](https://discuss.elastic.co/t/can-shield-setup-a-defalut-pass-for-admin-for-2-3-2/46975/5 "2017-07-06T13:45:26Z")