How to Create an Admin User in Magento
Magento allows store owners and administrators to create separate backend accounts for employees, developers, managers, and other team members who need access to the store.
Creating individual Admin users is better than sharing one administrator account. Each user can have their own username, password, email address, and role-based permissions. This makes it easier to control access and determine which parts of Magento each person can manage.
For example, a product manager may only need access to the catalog, while an administrator may require access to configuration, customers, orders, and system settings.
This guide explains how to create a new Magento Admin user, assign a role, configure permissions, and troubleshoot common problems.
What Is a Magento Admin User?
A Magento Admin user is an account that can access the Magento backend.
Depending on the assigned role, an Admin user may be able to:
- Manage products
- Create and edit categories
- Process orders
- Manage customers
- Configure shipping
- Configure payment methods
- Manage promotions
- Edit website content
- View reports
- Configure store settings
- Manage extensions
- Create other administrator accounts
The user’s permissions are determined by the role assigned to the account.
Why Create Separate Magento Admin Users?
Sharing one administrator account between multiple people can make store management and security more difficult.
Creating individual accounts provides several advantages.
Better Accountability
Each administrator has their own login credentials, making it easier to identify who is using the backend.
Easier Permission Management
You can give users only the permissions they need.
Easier Access Removal
When an employee or contractor no longer needs access, their account can be disabled or removed without affecting other administrators.
Improved Security
Individual accounts reduce the need to share administrator passwords.
Better Team Management
Different teams can receive different roles based on their responsibilities.
Magento Admin User vs Admin Role
These two concepts are closely related but serve different purposes.
| Item | Purpose |
|---|---|
| Admin User | Represents an individual person who logs into Magento |
| Admin Role | Defines what that user is allowed to access |
| Username | Identifies the administrator |
| Password | Authenticates the administrator |
| Permissions | Determine which resources the user can access |
For example:
Admin User:
John
Role:
Product Manager
Permissions:
Catalog
Products
Categories
InventoryJohn can then log in with his own account while being restricted from areas that are not required for his job.
Requirements Before Creating an Admin User
Before creating another administrator, make sure you have:
- Access to the Magento Admin Panel
- An existing administrator account with permission to manage users
- The new user’s name
- A unique username
- A valid email address
- A suitable administrator role
- A secure authentication method
For production stores, avoid giving every user full administrator privileges.
How to Create an Admin User in Magento
Follow these steps to create a new administrator account.
Step 1: Log In to Magento Admin
Open your Magento Admin URL.
For example:
https://example.com/your-admin-pathEnter your existing administrator username and password.
Complete any additional authentication required by your security configuration.
Step 2: Open the System Menu
After logging in, locate the System menu in the Magento Admin Panel.
Open:
SystemThen find the administrator user management section.
Depending on the Magento version and installed extensions, the exact menu presentation may differ.
Step 3: Open All Users
Select:
All UsersThis page displays administrator accounts that already exist.
You can use this area to:
- View users
- Create users
- Edit users
- Disable users
- Delete users
- Reset passwords
- Assign roles
Step 4: Click Add New User
Click:
Add New UserMagento will open the administrator user creation form.
Step 5: Enter User Information
Fill in the required user details.
Typical fields include:
- User Name
- First Name
- Last Name
- Password
- Password Confirmation
- Interface Locale
For example:
User Name: john
First Name: John
Last Name: Smith
Email: [email protected]Use the actual details of the person who will operate the account.
Step 6: Create a Strong Password
Create a strong password for the new administrator account.
Avoid passwords such as:
admin123
password123
companyname123Instead, use a long and unique password.
A password manager is useful for generating and storing administrator credentials securely.
If your Magento version or configuration supports password policy requirements, make sure the password satisfies those requirements.
Step 7: Assign an Admin Role
Creating the user is not enough. The administrator should also have an appropriate role.
Magento uses User Roles to determine which resources an administrator can access.
Find the role assignment section and select the appropriate role.
For example:
Role: Product Manageror:
Role: Sales ManagerIf you already created a custom role, select that role.
Step 8: Save the User
After entering the required information and selecting the appropriate role, click:
Save UserMagento will create the administrator account.
The new user should then appear in the administrator user list.
Step 9: Test the New Account
Log out of your existing administrator account.
Then open the Magento Admin login page and sign in using the newly created account.
Verify that:
- Login works
- The assigned permissions work
- Restricted sections cannot be accessed
- The user can perform required tasks
- Two-factor authentication works if enabled
Testing permissions is especially important when using custom roles.
How to Create a Custom Admin Role
Magento allows you to create roles that provide administrators with only the permissions they need.
This is useful when creating accounts for:
- Store managers
- Product managers
- Customer support staff
- Content editors
- Sales teams
- Warehouse staff
- Marketing employees
- Developers
Step 1: Open User Roles
In Magento Admin, go to:
System → User RolesYou should see existing roles.
Step 2: Click Add New Role
Click:
Add New RoleMagento will open the role creation page.
Step 3: Enter the Role Name
Choose a descriptive name.
For example:
Product Manageror:
Customer SupportA clear role name makes permission management easier.
Step 4: Enter Your Password
Magento may ask you to enter your current administrator password before saving sensitive account or role changes.
Enter your current password when requested.
Step 5: Configure Resource Access
The permissions section allows you to determine which Magento resources the role can access.
For example, a product management role might require access to:
Catalog
├── Products
├── Categories
└── InventoryIt may not need access to:
System
Configuration
Integrations
Admin UsersOnly enable the resources required by the user’s responsibilities.
Step 6: Save the Role
Click:
Save RoleThe new role will then be available when assigning permissions to administrator accounts.
Example: Create a Product Manager User
Suppose you want to create an account for someone responsible for managing products.
You could create:
Username:
productmanager
Role:
Product ManagerThe role might provide access to:
- Products
- Categories
- Inventory
- Catalog pricing
while restricting access to:
- System configuration
- Integrations
- Administrator users
- Sensitive store settings
This follows the principle of giving users only the access necessary to perform their tasks.
Example: Create a Customer Support User
A customer support employee may need access to:
- Customers
- Orders
- Customer information
- Returns or related order functions
They may not need access to:
- Payment configuration
- System configuration
- Extensions
- Administrator accounts
- Developer settings
A dedicated support role can help keep those areas restricted.
Example: Create a Content Manager User
A content manager might need access to:
- CMS pages
- Blocks
- Widgets
- Store content
- Some marketing features
There is usually no reason to give such a user unrestricted access to:
- Payment settings
- System configuration
- Integrations
- Administrator management
Create a dedicated role with only the resources required for content management.
How to Edit a Magento Admin User
You may need to update an administrator’s information later.
Go to:
System → All UsersSelect the administrator account you want to modify.
You can then update available information such as:
- First name
- Last name
- Email address
- Password
- Interface settings
- Assigned role
Save the changes when finished.
How to Change an Admin User’s Role
If an employee changes responsibilities, you can assign a different role.
For example, an employee might move from:
Content Managerto:
Store ManagerOpen:
System → All UsersEdit the user’s account and change the assigned role.
Save the changes and ask the user to log in again to confirm the new permissions.
How to Disable a Magento Admin User
If an employee temporarily does not need access, disabling the account can be preferable to immediately deleting it, depending on your operational and audit requirements.
Open:
System → All UsersSelect the administrator account.
Use the available status or account controls to disable access.
This can be useful for:
- Temporary leave
- Contractors
- Former employees
- Suspended accounts
- Security investigations
Always follow your organization’s account-retention and audit procedures.
How to Delete a Magento Admin User
If an administrator account is no longer required, you can remove it through the Admin user management interface.
Before deleting an account, consider whether you need to retain its information for operational or audit purposes.
For employee departures, disabling the account first can provide a safer transition while access and records are reviewed.
How to Reset a Magento Admin User Password
If an administrator forgets their password, there are several approaches depending on your Magento version and configuration.
From the Login Page
The administrator can use:
Forgot Your Password?and follow the password-reset process.
From the Admin Panel
An authorized administrator can edit the user’s account and set a new password if the interface provides that option.
After changing a password, the user should use the new credentials and complete any additional authentication requirements.
How to Enable Two-Factor Authentication for Admin Users
Two-factor authentication adds another layer of protection to Magento administrator accounts.
If enabled, users may need:
- Username
- Password
- Additional authentication verification
The exact setup depends on the Magento version, edition, and enabled authentication modules.
For production stores, consider requiring stronger authentication for all administrative users, particularly accounts with access to system configuration and other sensitive resources.
Best Practices for Magento Admin Users
1. Never Share Administrator Accounts
Avoid using one account such as:
adminfor an entire team.
Instead, create:
john
sarah
michaelwith appropriate individual roles.
2. Follow the Principle of Least Privilege
Give each administrator only the permissions required to perform their job.
For example:
Product Manager
→ Catalog accessrather than:
Product Manager
→ Full system access3. Use Strong Passwords
Every administrator should have a unique password.
Do not reuse Magento administrator passwords on other websites.
4. Enable Two-Factor Authentication
Where supported and appropriate, enable two-factor authentication for administrator accounts.
5. Review Users Regularly
Periodically review:
System → All UsersLook for:
- Former employees
- Old developer accounts
- Unused accounts
- Temporary accounts
- Unexpected administrator accounts
Remove or disable accounts that no longer require access according to your account-management policy.
6. Limit Full Administrator Access
Only trusted personnel should receive roles with extensive system permissions.
Full administrative access may expose:
- Customer data
- Payment configuration
- Store configuration
- Integrations
- Extensions
- Administrator management
Use specialized roles whenever possible.
Common Problems When Creating Magento Admin Users
“Access Denied” Error
If you cannot create or modify administrator users, your current account may not have the necessary permissions.
Log in using an account with appropriate administrator-management permissions.
User Can Log In but Cannot See a Menu
This is often caused by the role assigned to the user.
Check:
System → User Rolesand review the role’s resource permissions.
User Has Too Much Access
Review the assigned role and remove unnecessary resources.
Do not give a user full administrator access simply because a particular menu item is missing.
Instead, identify the required resource and add only that permission.
User Cannot Log In
Check:
- Username
- Password
- Account status
- Admin URL
- Two-factor authentication
- Security restrictions
- Magento logs
Also confirm that the account was created successfully.
Magento Admin User Security Checklist
Use this checklist when creating administrator accounts:
- Create a separate account for each administrator.
- Use a unique username.
- Use a valid email address.
- Use a strong password.
- Assign an appropriate role.
- Follow least-privilege access.
- Enable two-factor authentication where appropriate.
- Test the account after creation.
- Review administrator accounts periodically.
- Disable accounts that no longer require access.
- Remove unnecessary roles and permissions.
- Avoid sharing administrator credentials.
Frequently Asked Questions
How many Magento Admin users can I create?
Magento supports multiple administrator accounts. The practical number depends on your store, infrastructure, operational requirements, and edition/configuration.
Can Magento Admin users have different permissions?
Yes. Magento’s role and permission system allows administrators to receive different levels of access.
Can I create a Magento Admin user without giving full access?
Yes. Create a custom role with only the resources the user needs and assign that role to the account.
Should every employee have the same Admin role?
No. Access should generally be based on each person’s responsibilities. A product manager, customer support employee, developer, and store owner may require very different permissions.
Can I change a user’s role later?
Yes. An administrator with appropriate permissions can edit the user’s account and assign another role.
Can I disable an Admin user?
Yes. Administrator accounts can be managed from the Admin user management area, including disabling or removing accounts depending on the available controls.
Is it safe to share one Magento Admin account?
Sharing accounts is generally undesirable because it makes individual accountability and access management more difficult. Separate accounts allow permissions and access to be managed per person.
Final Thoughts
Creating individual Magento Admin users is an important part of managing a multi-user eCommerce store. Instead of giving everyone the same administrator credentials, create separate accounts and assign roles based on each person’s responsibilities.
Use custom roles to implement least-privilege access, protect administrator accounts with strong authentication, and regularly review the list of active users. When employees, contractors, or developers no longer require access, disable or remove their accounts according to your organization’s access-management procedures.
A well-organized Magento administrator structure makes the backend easier to manage while reducing unnecessary access to sensitive store functions.