---
title: 'Tutorial: How to Use Local User Authentication'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--local-auth/
product: Access Server Docs
description: Use Access Server's robust, local authentication system to manage users and groups in the Admin Web UI.
---

# Tutorial: How to Use Local User Authentication

## Overview

By default, Access Server uses [local authentication](https://openvpn.net/as-docs/local.md), where you manage users and groups within the Admin Web UI, and Access Server stores it in the local database.

For detailed information about Access Server’s robust authentication system, refer to [Access Server's User Authentication System](https://openvpn.net/as-docs/user-authentication-system.md).

## Prerequisites

- An installed Access Server.
- Admin Web UI access.

## Step 1: Set local authentication as the default method

> **Tip**
>
> **Local** is the default authentication method in Access Server. If you haven't changed it, no action is needed in this step.

To start creating users, set 'local' as the authentication method and then manage users and groups. To set local as the default authentication for users and groups:

1. Sign in to the Admin Web UI.
2. Click **Authentication \> General**.
3. Ensure that **Local** is set to **On**.
4. Click **Save Settings** and **Update Running Server**, if needed.

   > **Tip**
   >
   > You can also set other authentication methods as the default and assign local as the method at the user or group level.

## Step 2: Create a new group

1. Sign in to the Admin Web UI.
2. Click **User Management \> Group Permissions**.
3. Enter a group name in the text field and click **More Settings**.
4. Leave the authentication method as default, or select **Local**.
5. Define any other group properties desired.
6. Select **Save Settings** and **Update Running Server**.

## Step 3: Create a new user

1. Sign in to the Admin Web UI.
2. Click **User Management \> User Permissions**.
3. Enter a username in the username text field.
4. Assign the user to the desired group.
5. Click **More Settings**.
6. Leave the authentication method as default, or select **Local**.
7. Enter a password in the text field, then define any desired user properties.
8. Select **Save Settings** and **Update Running Server**.

---

Prev: [Local Authentication](https://openvpn.net/as-docs/tutorials/local.md)
Next: [Tutorial: Allow Users to Change Passwords from the Client Web UI](https://openvpn.net/as-docs/tutorials/tutorial--user-password-change-cws.md)
Index: https://openvpn.net/as-docs/llms.txt