Users that authenticate to the Configuration API or the Administrative Console are stored in cn=RootDNs,cn=config. The setup tool automatically creates one administrative account when performing an installation. Accounts can be added or changed with the dsconfig tool.