---
title: Configuring a global administrator
description: A global administrator is created when replication is enabled and is responsible for managing configuration server groups.
component: pingdirectory
version: 11.0
page_id: pingdirectory:pingdirectory_server_administration_guide:pd_ds_config_global_admin
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/pingdirectory_server_administration_guide/pd_ds_config_global_admin.html
revdate: September 13, 2023
page_aliases: ["pd_ds_create_global_admin.adoc", "pd_ds_remove_global_admin.adoc"]
section_ids:
  creating-a-global-administrator: Creating a global administrator
  steps: Steps
  example: Example:
  example-2: Example:
  removing-a-global-administrator: Removing a global administrator
  steps-2: Steps
  example-3: Example:
  example-4: Example:
---

# Configuring a global administrator

A global administrator is created when replication is enabled and is responsible for managing configuration server groups.

A configuration server group is an administration domain that allows you to synchronize configuration changes to one or all of the servers in the group. For example, you can set up a group when configuring a replication topology where configuration changes to one server can be applied to all of the servers at a time.

Global administrators are stored in the topology registry. These entries are always mirrored between servers in a topology. Global administrators can be assigned privileges like other administrator users but are typically used to manage the data under `cn=topology,cn=config` and `cn=config`. You can create new or remove global administrators using the `dsconfig` tool. The global administrator entries are located in the `cn=Topology Admin User, cn=topology,cn=config` branch.

## Creating a global administrator

### Steps

1. To create a new global administrator, use the `create-topology-admin-user` option with `dsconfig`.

   #### Example:

   ```shell
   $ bin/dsconfig create-topology-admin-user \
     --user-name admin2 \
     --set alternate-bind-dn:cn=admin2 \
     --set password:rootPassword
   ```

2. To verify the creation of the new administrator, use the `list-topology-admin-users` option with `dsconfig`.

   #### Example:

   ```shell
   $ bin/dsconfig list-topology-admin-users
   Topology Admin User : Type
   :_
   admin               : generic
   admin2              : generic
   ```

## Removing a global administrator

### Steps

1. To delete a global administrator, use the `delete-topology-admin-user` option with `dsconfig`.

   #### Example:

   ```shell
   $ bin/dsconfig delete-topology-admin-user --user-name admin2
   ```

2. To verify the deletion of the global administrator, use the `list-topology-admin-users` option with `dsconfig`.

   #### Example:

   ```shell
   $ bin/dsconfig list-topology-admin-users
   Topology Admin User : Type
   :
   admin               : generic
   ```