Tenant administrator role assignment process and dependencies? (AI to assist :) )

Your question

I am trying to setup a tenant with a tenant administrator to add/remove/etc. accounts/groups and other (tenant only) administration functions.

Using the WebUI on 0.16.11:

I’ve created Tenant-A

I’ve assign Domain TA.com the tenant Tenant-A

I’ve created user account: [email protected] in as tenant Tenant-A

When I tried to add the Roles “Tenant Administrator” to UserT@TA/com, I get the message:

This item references another item that does not exist.

What am I doing wrong?What more do I need to check?

What would the CLI approach be?

I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.

on

I don’t understand what you posted.

Use your own words, not a LLM.

It WAS my own words ;(

just I copy pasted the previous and only now noticed the next lines was removed ;(

The formating beter and understandable?
Or how do you create tenant with a tenant administrator only?

“This item references another item that does not exist” means the role you’re assigning can’t be resolved in that principal’s scope, so it’s a setup/scoping issue rather than the account itself. A couple of things to confirm: is the user’s tenant set before you assign the role, and does the tenant’s own roles/permissions actually include the tenant-admin capability? A tenant can’t grant a permission it doesn’t itself hold, so if the tenant wasn’t granted that, assigning the role to its user fails to resolve.

Also confirm the built-in “Tenant Administrator” role still exists (not renamed or deleted) and is the one you’re selecting. If it keeps failing in the UI, try setting the role via stalwart-cli on the principal to see whether it’s the UI or the underlying reference, and let me know the exact step it fails on.

solution eventually noticed in: Make an account a Tenant Administrator doesnt work - #6 by stalwart