en	This is the table of backend administration users. Backend users can login in the backend of TYPO3 and are typically producers of content on a website.

en	The main settings for a backend user is a username, password and group memberships. The username and password authenticates the user to the system. The group memberships enables the user to perform actions in TYPO3 since groups are the main source of permission settings for a backend user. Backend usergroups can also be understood as "roles". A usergroup can contain a configuration of permissions which allows the user to play a certain role in the system. <b>The "Admin" user</b> There is a special kind of user, the "Admin" user. This user has access to everything in TYPO3. There are no limits for Admin-users at all. You should normally have only a single or two admin-users in your system. Admin-users are the only users who can create other backend users. Alternatively you can create an "Action" which enables other normal users to do it as well (with certain restrictions of course). <b>Location</b> Backend users are always created in the root of the page tree (like Backend groups are). <b>Comparing Users</b> To manage and compare users, getting an overview of their access credentials etc. you can use the Tools > User Admin module (extension: beuser). It allows you to group users by various categories of permissions. You can also switch to another users account by a single click of a button.

en	be_groups, About backend users | https://docs.typo3.org/typo3cms/GettingStartedTutorial/UserManagement/BackendUsers/ Setting up a new user and group | https://docs.typo3.org/typo3cms/InsideTypo3Reference/CoreArchitecture/AccessControl/SettingUpANewUser/ Users and Groups [Technical] | https://docs.typo3.org/typo3cms/InsideTypo3Reference/CoreArchitecture/AccessControl/UsersAndGroups/

en	EXT:lang/cshimages/beuser_2.png, EXT:lang/cshimages/beuser_1.png, EXT:lang/cshimages/beuser_3.png

en	Backend users are found in the root of the page tree. "Admin" backend users can always be recognized on their icon being red while normal users have a blue icon. The editing form of a backend users record. The "Tools > User Admin" module where you can get an overview of the users on the system and what permissions they have. Click the "SU" button to switch to a users account.

en	Enter the login name of the backend user.

en	A username is required and must be in lowercase without spaces in it. Furthermore the username must be unique. If it is not unique a number will be appended automatically.

en	be_users:password

en	Enter the password for the backend username above (Notice the value you enter <i>will</i> be readable in the field!).

en	The password is required. Before the password is sent to the server it's md5-hashed, so the password value itself is not transferred over the Internet. This is true both when editing the password and when the user logs in. While this principle does not reveal the raw password it is <i>not</i> the same as real encryption. If you need the highest degree of security you should install the TYPO3 backend on a secure server. The password is stored in the database as an md5-hash and thus it's not possible to extract the original password from the database either. This means that 'lost passwords' must be substituted with a new password for the user. <b>Notice</b> When you enter the password in the password field it is initially visible in clear text! First when the password field focus is lost will the password become a "list of dots". <b>User changing password</b> Users can change their password from the User > Setup module

en	_MOD_user_setup:option_newPassword

en	Assign backend user groups to the user.

en	The backend user groups defines the permissions which the backend user will inherit. So unless the backend user is an 'Admin' user, he needs to be a member of one or more user groups in order to have practically any permissions assigned. The properties set in the user groups are mostly added together. The first (top) group in the list is the group which will, by default, be the owner of pages the user creates.

en	be_users:TSconfig, be_groups

en	Enter the host name from which the user is forced to login.

en	A TYPO3 system may have multiple domains pointing to it. Therefore this option secures that users can login only from a certain host name.

en	be_groups:lockToDomain, fe_users:lockToDomain, fe_groups:lockToDomain

en	Disable the lock of the backend users session to the remote IP number.

en	You will have to disable this lock if backend users are accessing TYPO3 from ISDN or modem connections which may shutdown and reconnect with a new IP. The same would be true for DHCP assignment of IP numbers where new IP numbers are frequently assigned.

en	Assign startpoints for the users page tree.

en	The page tree used my all Web-submodules to navigate must have some points-of-entry defined. Here you should insert one or more references to a page which will represent a new root page for the page tree. This is called a 'Database mount'. <strong>Notice</strong> that backend user groups also has DB mounts which can be inherited by the user. So if you want a group of users to share a page tree, you should probably mount the page tree in the backend user group which they share instead.

en	be_groups:db_mountpoints, be_users:file_mountpoints, be_users:options, xMOD_csh_corebe:perm_module, xMOD_csh_corebe:pagetree

en	EXT:lang/cshimages/be_groups_3.png, EXT:lang/cshimages/be_groups_4.png

en	A DB mount is assigned to the user. Users can only operate on pages and records which are inside their DB mounts! When a page is mounted for a user it will become the root of their page tree. The user must have access to the page through the regular page permissions set in the Web > Access module.

en	Assign startpoints for the file folder tree.

en	The file folder tree is used by all File-submodules to navigate between the file folders on the webserver. Notice as with 'DB mounts' the file folder mounts may be inherited from the member groups of the user. See Backend Groups for details

en	be_groups:file_mountpoints, be_users:db_mountpoints, be_users:options, xMOD_csh_corebe:filetree, sys_filemounts

en	Enter the email address of the user.

en	This address is rather important to enter because this is where messages from the system is sent. <strong>Notice</strong> the user is able to change this value by himself from within the User>Setup module.

en	be_users:realName, _MOD_user_setup:option_newPassword

en	Enter the ordinary name of the user, eg. John Doe.

en	<strong>Notice</strong> the user is able to change this value by himself from within the User>Setup module.

en	be_users:email, _MOD_user_setup:option_newPassword

en	This option will temporarily disable the user from logging in.

en	be_users:starttime, be_users:endtime

en	'Admin' users have TOTAL access to the system!

en	'Admin' can do anything TYPO3 allows and this kind of user should be used only for administrative purposes. All daily handling should be done with regular users. 'Admin' users don't need to be members of any backend user groups. However you should be aware that any page created by an admin user without a group will not have any owner-group assigned and thus it will probably be invisible for other users. If this becomes a problem you can easily solve it by assigning a user group to the 'Admin' user anyway. This does of course not affect the permissions since they are unlimited, but the first group listed is by default the owner group of newly created pages. 'Admin' users are easily recognized as they appear with a red icon instead of the ordinary blue user-icon. You should probably not assign any other users than yourself as an 'Admin' user.

en	EXT:lang/cshimages/beuser_4.png

en	Select if the user should inherit page tree or folder tree mountpoints from member groups.

en	It's a great advantage to let users inherit mountpoints from membergroups because it makes administration of the same mountpoints for many users extremely easy. If you don't check these options, you must make sure the mount points for the page tree and file folder tree is set specifically for the user.

en	be_users:db_mountpoints, be_users:file_mountpoints

en	Select file operation permissions for the user.

en	These settings relate to the functions found in the File>List module as well as general upload of files. <strong>Notice</strong> that backend user groups also have file operation permissions which automatically apply to the user if he's member of an accordant group. So if you want a group of users share identical file operation permissions, you should probably define them in a backend user group instead.

en	be_users:file_mountpoints, be_group:file_permissions

en	Select file operation permissions for the user.

en	These settings relate to the functions found in the File>List module as well as general upload of files. <strong>Notice</strong> that backend user groups also have file operation permissions which automatically apply to the user if he's member of an accordant group. So if you want a group of users share identical file operation permissions, you should probably define them in a backend user group instead.

en	be_users:file_mountpoints, be_group:file_permissions

en	Enter the date from which the account is active.

en	be_users:disable, be_users:endtime, pages:starttime

en	Enter the date from which the account is disabled.

en	be_users:disable, be_users:starttime, pages:starttime

en	This field shows the user's last log in date.

en	Select the <i>default</i> language.

en	This determines the language of the backend interface for the user. All mainstream parts available for regular users are available in the system language selected. 'Admin'-users however will experience that the 'Admin'-only parts of TYPO3 is in english. This includes all submodules in "Tools" and the Web>Template module. <b>Notice</b> this is only setting the default language. As soon as the user has logged in the language must be changed through the User>Setup module. Also you will have to install the corresponding language pack which can be found as an extension on TYPO3.org with the prefix "csh_XX" where XX is the TYPO3 language key.

en	_MOD_user_setup:language

en	Select available backend modules for the user.

en	This determines which 'menu items' are available for the user in the backend. Notice that the same list of modules may be configured for the backend user groups and that these will be inherited by the user in addition to the modules you select here. It's highly likely that you should not set any modules for the user himself but rather select the modules in the backend groups he's a member of. However this list provides a great way to add a single module for specific users.

en	be_groups:groupMods

en	Enter additional TSconfig for the user (advanced).

en	This field allows you to extend the configuration of the user in severe details. A brief summary of the options include a more detailed configuration of the backend modules, setting of user specific default table field values, setting of Rich Text Editor options etc.

en	pages:TSconfig, fe_users:TSconfig, be_groups:TSconfig, User TSconfig | https://docs.typo3.org/typo3cms/TSconfigReference/UserTsconfig/

en	Select which record languages the group members are limited to edit.

en	You can also limit users to specific languages with user group settings. Please see the same field for backend user groups for more details.

en	be_groups:allowed_languages

en	EXT:lang/cshimages/be_groups_18.png