Users that authenticate to the Configuration API or the administrative console are stored in cn=RootDNs,cn=config. The setup tool automatically creates one administrative account when performing an installation. Accounts can be added or changed with the dsconfig tool.