Cannot add new users, despite being Owner

Hi folks. Something strange happened to my HomeAssistant recently. I discovered that I couldn’t log in using my normal credentials (mark) from a new browser, so to ensure I didn’t get locked out I created a new admin user (cylindric) from the working session. I ticked the box to make that user an admin, and I can log in as that user.
However, I cannot see the “Users” option in the config from that account.

I have checked in /config/.storage/auth, and the new user appears to be suitably empowered, and the profile page says “you are an owner”. How do I enable this user as a FULL admin?

From the server console I even tried running authentication reset --username mark --password "MyNewPassword" but still cannot log in with that user.

Host: HomeAssistant VM
Operating System: Home Assistant OS 5.12
Supervisor: 2021.03.6
Core: 2021.3.4


auth:

{
    "version": 1,
    "key": "auth",
    "data": {
        "users": [
            {
                "id": "ee70d4daad9d49b893fe20b0cfff9b96",
                "group_ids": [
                    "system-admin"
                ],
                "is_owner": false,
                "is_active": true,
                "name": "Hass.io",
                "system_generated": true
            },
            {
                "id": "3885d74aac7c4b81b392fc45d42405d4",
                "group_ids": [
                    "system-admin"
                ],
                "is_owner": true,
                "is_active": true,
                "name": "Mark",
                "system_generated": false
            },
            {
                "id": "e62ebe5a9186457f8bad72e695325c2d",
                "group_ids": [
                    "system-admin"
                ],
                "is_owner": false,
                "is_active": true,
                "name": "Home Assistant Cloud",
                "system_generated": true
            },
            {
                "id": "89f73736c8b24a83ad8c227cc5fdd14d",
                "group_ids": [
                    "system-admin"
                ],
                "is_owner": true,
                "is_active": true,
                "name": "Cylindric",
                "system_generated": false
            }
        ],
        "groups": [
            {
                "id": "system-admin",
                "name": "Administrators"
            },
            {
                "id": "system-users",
                "name": "Users"
            },
            {
                "id": "system-read-only",
                "name": "Read Only"
            }
        ],
        "credentials": [
            {
                "id": "51e057e1dbcf4192bd41e7d5d137e903",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "auth_provider_type": "homeassistant",
                "auth_provider_id": null,
                "data": {
                    "username": "mark"
                }
            },
            {
                "id": "c9f0de90043f49c7823c8a07d8143735",
                "user_id": "89f73736c8b24a83ad8c227cc5fdd14d",
                "auth_provider_type": "homeassistant",
                "auth_provider_id": null,
                "data": {
                    "username": "cylindric"
                }
            }
        ],
        "refresh_tokens": [
            {
                "id": "4193f07a19c14f43b3356391c85ed891",
                "user_id": "ee70d4daad9d49b893fe20b0cfff9b96",
                "client_id": null,
                "client_name": null,
                "client_icon": null,
                "token_type": "system",
                "created_at": "2021-03-05T23:12:32.216890+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-27T11:35:31.702426+00:00",
                "last_used_ip": "172.30.32.2",
                "credential_id": null,
                "version": "2021.3.1"
            },
            {
                "id": "54eca49b7f084029b3fdfdeaca4b80a0",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "client_id": "http://192.168.0.1:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-05T23:13:50.093745+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-05T23:13:50.093987+00:00",
                "last_used_ip": "172.29.14.136",
                "credential_id": "51e057e1dbcf4192bd41e7d5d137e903",
                "version": "2021.3.1"
            },
            {
                "id": "1b788b8aad6342ef8b482dbbeb1e4cde",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "client_id": "http://192.168.0.1:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-05T23:47:44.423577+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-05T23:47:44.423850+00:00",
                "last_used_ip": "172.29.14.136",
                "credential_id": "51e057e1dbcf4192bd41e7d5d137e903",
                "version": "2021.3.1"
            },
            {
                "id": "bfc3df2ba8414e1bb68454460965134e",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "client_id": "http://172.29.14.116:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-05T23:48:13.958502+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-06T00:18:20.928708+00:00",
                "last_used_ip": "172.29.14.136",
                "credential_id": "51e057e1dbcf4192bd41e7d5d137e903",
                "version": "2021.3.1"
            },
            {
                "id": "12382b6a87954b88b804ed738a11a4f1",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "client_id": "http://hassio.local:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-06T00:48:37.757366+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-10T20:41:06.795621+00:00",
                "last_used_ip": "172.29.14.136",
                "credential_id": "51e057e1dbcf4192bd41e7d5d137e903",
                "version": "2021.3.1"
            },
            {
                "id": "d9c8f3d8d9b549ecb0e4e3d322db9802",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "client_id": "http://hassio.local:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-16T13:28:38.031644+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-25T16:37:00.522549+00:00",
                "last_used_ip": "172.29.14.182",
                "credential_id": "51e057e1dbcf4192bd41e7d5d137e903",
                "version": "2021.3.1"
            },
            {
                "id": "56a22512177e41958511fa21b140243f",
                "user_id": "3885d74aac7c4b81b392fc45d42405d4",
                "client_id": "https://home-assistant.io/android",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-20T19:48:35.391927+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-26T19:52:27.930592+00:00",
                "last_used_ip": "172.29.14.162",
                "credential_id": "51e057e1dbcf4192bd41e7d5d137e903",
                "version": "2021.3.4"
            },
            {
                "id": "cd0508aae86f4ae3a37497dae0a8e638",
                "user_id": "89f73736c8b24a83ad8c227cc5fdd14d",
                "client_id": "http://hassio.local:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-27T01:43:48.175878+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-27T01:43:48.182898+00:00",
                "last_used_ip": "172.29.14.100",
                "credential_id": "c9f0de90043f49c7823c8a07d8143735",
                "version": "2021.3.4"
            },
            {
                "id": "9a84d3911a294342bd7a1744dfa47de0",
                "user_id": "89f73736c8b24a83ad8c227cc5fdd14d",
                "client_id": "http://hassio.local:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-27T11:26:01.799423+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-27T11:26:01.799917+00:00",
                "last_used_ip": "172.29.14.100",
                "credential_id": "c9f0de90043f49c7823c8a07d8143735",
                "version": "2021.3.4"
            },
            {
                "id": "467f413ba8344c81a2dde3f964f335fe",
                "user_id": "89f73736c8b24a83ad8c227cc5fdd14d",
                "client_id": "http://hassio.local:8123/",
                "client_name": null,
                "client_icon": null,
                "token_type": "normal",
                "created_at": "2021-03-27T11:31:34.915865+00:00",
                "access_token_expiration": 1800.0,
                "token": "...",
                "jwt_key": "...",
                "last_used_at": "2021-03-27T11:31:34.932352+00:00",
                "last_used_ip": "172.29.14.100",
                "credential_id": "c9f0de90043f49c7823c8a07d8143735",
                "version": "2021.3.4"
            }
        ]
    }
}

auth_provider.homeassistant:

{
    "version": 1,
    "key": "auth_provider.homeassistant",
    "data": {
        "users": [
            {
                "username": "mark",
                "password": "..."
            },
            {
                "username": "cylindric",
                "password": "..."
            }
        ]
    }
}

The console password reset problem seems to be a bug in the command. The help for ha authentication implies the password should be quoted, however the quotes are included in the password. If I actually enter the quotes in the login screen I can log in. I’ve raised that as a bug.

Examples:

  ha authentication reset --username "JohnDoe" --password "123SuperSecret!"

It doesn’t seem a stretch to assume that user’s password is actually 123SuperSecret! and not "123SuperSecret!"

I had the same issue and could solve the problem with enabling the advanced mode in my new owner’s profile settings.