What is the best practice for creating passwords for admins when developing Java Enterprise applications with Spring Boot?

Question

Java

I started making a clinic-like application for patients using Java and Spring Boot. There are administrators who fill out patient cards, add or remove doctors from the database, they have full access to the database. There are doctors who create a profile for themselves and receive a schedule of patients, and there are patients (users) who can make an appointment and see their medical history.
And immediately I ran into this question:
who and how creates passwords and gives all rights to admins?
Only this scheme comes to mind: when creating an application, developers create one admin, transfer the password from this entry in the company's database to the customer, and already there this one person with this password creates more admins, and they already create doctors and users in the database
How is it done in commercial projects?

Answer 1

You described everything correctly, this happens in commercial projects as well.