The 403 error you’re seeing when trying to create an Administrator or Super Administrator account is caused by Admin Tools’ “Disable editing user properties” feature in the Web Application Firewall. This is a security hardening option that, when enabled, prevents any changes to privileged user accounts — including creating new ones — even for Super Administrators.
To resolve this, please follow these steps:
- In your Joomla administrator, go to Components → Admin Tools.
- Click on Web Application Firewall.
- Click on Configure WAF.
- Click on the Hardening Options tab.
- Find the “Disable editing user properties” option and set it to No.
- Click Save & Close.
- You should now be able to create your Administrator or Super Administrator account without getting a 403 error.
Once you have finished adding the new privileged user account, we strongly recommend re-enabling this option (setting it back to Yes and saving) to maintain optimal protection for your site.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!