# User administation

Select administration area

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/scaled-1680-/MBsimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/MBsimage.png)

### Local user accounts

#### Creating a new staff member

Start the new staff wizard, enter required information if the user is required to login check the "Allow login" box

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/scaled-1680-/7Xvimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/7Xvimage.png)

You can use the generate password button to create a password

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/scaled-1680-/6pHimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/6pHimage.png)

Service scheduler will check for a similar name to ensure that the user

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/scaled-1680-/EYzimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/EYzimage.png)

#### Edit existing staff member

To find a staff member that has had their account disabled. Select the following button

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/scaled-1680-/7RWimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/7RWimage.png)

Adjust user details as required

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/scaled-1680-/CEJimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/CEJimage.png)

### LDAP Integration (Active Directory)

To enable LDAP integration, navigate to system settings and search for "ldap"

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/scaled-1680-/AI2image.png)](https://help.abitsystems.com.au/uploads/images/gallery/2025-09/AI2image.png)

<table border="1" id="bkmrk-ldap_allow_company-t" style="border-collapse: collapse; width: 100%;"><colgroup><col style="width: 50%;"></col><col style="width: 50%;"></col></colgroup><tbody><tr><td>ldap\_allow\_company</td><td>This will look at the users "company" and if matches will allow login/ Blank will allow any company value.</td></tr><tr><td>ldap\_allow\_departments</td><td>This will look at group the user is a member of and if they match a group name </td></tr><tr><td>ldap\_domain</td><td>Your LDAP / Active Directory domain name</td></tr><tr><td>ldap\_server\_hostname</td><td>The domain will be used to find a server via DNS but a specific server can be specified.</td></tr><tr><td>ldap\_server\_port</td><td>Port to communicate for LDAP requests</td></tr></tbody></table>

Departments / Active Directory groups are the recommended method of controller

[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/scaled-1680-/Mzhimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-08/Mzhimage.png)

As the password is controlled by LDAP, attempting to change the password will result in "User passwords are managed by LDAP integration"

[![image.png](https://wiki.abitsystems.com.au/uploads/images/gallery/2024-07/scaled-1680-/Blt3uX71JGk4xrDd-image.png)](https://wiki.abitsystems.com.au/uploads/images/gallery/2024-07/Blt3uX71JGk4xrDd-image.png)