# Deploying the Dashboard UI

[https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/](https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/)

[create sample user](https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md)<svg fill="currentColor" height="24" viewbox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"></svg>

The Dashboard UI is not deployed by default. To deploy it, run the following command:

```
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml

```

## Accessing the Dashboard UI<svg fill="currentColor" height="24" viewbox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"></svg>

To protect your cluster data, Dashboard deploys with a minimal RBAC configuration by default. Currently, Dashboard only supports logging in with a Bearer Token. To create a token for this demo, you can follow our guide on [creating a sample user](https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md).

<div class="alert alert-danger warning callout" id="bkmrk-warning%3A%C2%A0the-sample-" role="alert">**Warning:** The sample user created in the tutorial will have administrative privileges and is for educational purposes only.</div>### Command line proxy<svg fill="currentColor" height="24" viewbox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"></svg>

You can enable access to the Dashboard using the `kubectl` command-line tool, by running the following command:

```
kubectl proxy

```

Kubectl will make Dashboard available at [http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/](http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/).

The UI can *only* be accessed from the machine where the command is executed. See `kubectl proxy --help` for more options.

<div class="alert alert-info note callout" id="bkmrk-note%3A%C2%A0the-kubeconfig" role="alert">**Note:** The kubeconfig authentication method does **not** support external identity providers or X.509 certificate-based authentication.</div>## Welcome view<svg fill="currentColor" height="24" viewbox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"></svg>

When you access Dashboard on an empty cluster, you'll see the welcome page. This page contains a link to this document as well as a button to deploy your first application. In addition, you can view which system applications are running by default in the `kube-system` [namespace](https://kubernetes.io/docs/tasks/administer-cluster/namespaces/) of your cluster, for example the Dashboard itself.