# How to add an admin user

You can add new Back Office users, such as admins, only if you have the necessary permissions to manage users.

To add a new Back Office user:

{% stepper %}
{% step %}
Navigate to **System** > **Users** > **Users**.
{% endstep %}

{% step %}
Click **+Create** in the upper-right page corner.
{% endstep %}

{% step %}
On the **Create user** page, fill in the following fields:

<figure><img src="https://514898401-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGoRxAprhHu1goANW7FXt%2Fuploads%2Fgit-blob-68290ea76cddbe4e4f4be6b964d23cc4b951c107%2Fcreate-user.png?alt=media" alt="Create user page"><figcaption><p>Create user page</p></figcaption></figure>

* In the **Email** field, enter the user's email address.
* In the **Password** field, enter a password.

  You can also generate a secure password by clicking the **Generate** button on the right side of the field. To view the generated password, enable the **Show password** option.
* In the **Status** dropdown, select **Enabled**.
* In the **Groups** dropdown, select one or more groups in which the new user will be included (for details, refer to [How to add a user group and grant permissions](https://docs.b2core.b2broker.com/how-to-articles/manage-system-settings/how-to-add-a-user-group-and-grant-permissions)).

{% hint style="info" %}
The selected groups define the permissions that the new user will have.

The **Administrators** group grants all the available permissions to the users included in this group.
{% endhint %}

* In the **Name** field, enter the user’s first and last names.
* Select the **Send to email** checkbox to send credentials to the specified user email address.
* Select the **Mask data** checkbox to prevent the user from viewing client personal data. With this option enabled, such data as client names, email addresses, and phone numbers will be masked with asterisks (`*`) for this particular Back Office user.
  {% endstep %}

{% step %}
Click **Save** to register the new user in the Back Office.
{% endstep %}
{% endstepper %}

For newly registered Back Office users, two-factor authentication (2FA) via email codes is enabled by default. After entering their credentials, users will be prompted to enter verification codes sent to their email addresses when signing in to the Back Office.