Set default permissions for initial admin user

[apodacaduron]

Description

Ensures the initial Admin user created during project setup receives all default Admin permission flags immediately.

This updates both the setup wizard admin creation flow and the CLI admin install flow so the first Admin has permissions like self-assign, edit locations, export, import from web, and media access without needing to be edited and saved later from the Users page.

How to Test

1. Start with a fresh/uninitialized project.
2. Complete the setup wizard and create the initial Admin account.
3. Log in as that Admin.
4. Confirm Admin-only permission flags are enabled, including can_self_assign.
5. Confirm the Admin can self-assign actors, bulletins, and incidents without first editing/saving their account from the Users page.
6. Optionally run the setup wizard security test covering /api/create-admin.

Jira ID (if applicable)

BYNT-1694

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: c47b6cfe-0330-4919-9a7b-005e547ba8c8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch initial-admin-permissions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}