ok well the webadmin password is not written in the tables that I can find for the instance, and its not in the .ini file unless its written into a hash, it may be on the 3cx website for the license associated with the instance....but yes I can delete the instance and restore the relevant tables... but that seems absurd...
Note my frustration. And yes I can change these rights of an individual user if I can get into the webamin tool to begin with so thanks for those directions.
Anyway... in the future my recommendation to you all is to simply have your developers write out any console users to the phonesystem.customers table so that you can view them, and add another maintenance screen for that process either on the 3cx portal, or on the phonesystem itself (unless you want to stay on the SMB marketplace).