• Use configuration files to prevent new users from creating top-level groups
  • Prevent existing users from creating top-level groups
• Prevent users from changing their usernames

Modify global user settings

GitLab administrators can modify user settings for the entire GitLab instance.

Use configuration files to prevent new users from creating top-level groups

By default, new users can create top-level groups. To disable new users’ ability to create top-level groups (does not affect existing users’ setting), GitLab administrators can modify this setting:

• In GitLab 15.5 and later, using either:
  • The GitLab UI.
  • The application setting API.
• In GitLab 15.4 and earlier, in a configuration file by following the steps in this section.

To disable new users’ ability to create top-level groups using the configuration file:

Omnibus GitLab installations

1. Edit /etc/gitlab/gitlab.rb and add the following line:

   gitlab_rails['gitlab_default_can_create_group'] = false
   

2. Reconfigure and restart GitLab.

Source installations

1. Edit config/gitlab.yml and uncomment the following line:

   # default_can_create_group: false  # default: true
   

2. Restart GitLab.

Prevent existing users from creating top-level groups

Administrators can:

• Use the Admin Area to prevent an existing user from creating top-level groups.
• Use the modify an existing user API endpoint to change the can_create_group setting.

Prevent users from changing their usernames

By default, new users can change their usernames. To disable your users’ ability to change their usernames:

Omnibus GitLab installations

1. Edit /etc/gitlab/gitlab.rb and add the following line:

   gitlab_rails['gitlab_username_changing_enabled'] = false
   

2. Reconfigure and restart GitLab.

Source installations

1. Edit config/gitlab.yml and uncomment the following line:

   # username_changing_enabled: false # default: true - User can change their username/namespace
   

2. Restart GitLab.