> ## Documentation Index
> Fetch the complete documentation index at: https://docs.abbyy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage users

> Create, import, and delete ABBYY FlexiCapture user accounts, choose IIS or FlexiCapture authentication, and enable self-registration via the web interface.

The FlexiCapture administrator creates and deletes user accounts. The procedure for creating a new user depends on the authentication type used for that user. For more information, see [Authentication methods](/flexi-capture/admin-guide/authentication-ag).

## Logins and authentication types

Standard IIS authentication requires ABBYY FlexiCapture to store the user's Windows login. FlexiCapture authentication (included in the server components setup) additionally requires the program to store the user's password, as a hash in the ABBYY FlexiCapture database.

An account authenticated by FlexiCapture can have any login, including the same login as the user's Windows account. If the logins match, the user needs a different password for each authentication type:

* For standard IIS authentication, use the Windows password.
* For FlexiCapture authentication, use the ABBYY FlexiCapture password.

Regardless of the authentication type, ABBYY FlexiCapture identifies users only by their logins.

If ABBYY FlexiCapture knows only a user's login, the user can be authenticated only with standard IIS authentication. If it knows both the login and the password, the user can be authenticated with FlexiCapture authentication.

## Enable FlexiCapture authentication for a user

Reset the user's password so they receive a temporary one.

<Steps>
  <Step title="Open the Users page">
    In the Administration and Monitoring Console, click **Settings → Users**.
  </Step>

  <Step title="Open the user's page">
    In the **Login** column, click the user's login.
  </Step>

  <Step title="Reset the password">
    On the page that opens, click the **Reset password** button.
  </Step>
</Steps>

The user receives an email notification containing the temporary password.

## Add users manually

<Steps>
  <Step title="Add a user">
    Open the Administration and Monitoring Console, go to the **Settings → Users** page, and click the **New user** button.
  </Step>

  <Step title="Specify the account details and save">
    On the page that opens, specify the login, full name, and email address of the new user, grant the required roles and permissions, and click **Save**.
  </Step>
</Steps>

A user added this way can be authenticated with standard IIS authentication if their login matches their Windows login. In that case, the Windows password is used for authentication. If the user is not in the domain where the Application Server is located, pass-through authentication can be used.

For more information, see [User roles and permissions](/flexi-capture/web-stations/monitoring-console/permissions) and [Use the Active Directory to manage users](/flexi-capture/admin-guide/users-ad).

## <a id="self-reg" />User self-registration (using the web interface)

This method of adding users is used for operators who need to access the system remotely from a browser and who are not in the domain where the Application Server is installed. For such operators to be authenticated by the Application Server, use FlexiCapture authentication.

New users can self-register with ABBYY FlexiCapture by clicking the **Registration** link on the `https://<ApplicationServer>/FlexiCapture12/Login` page, where `<ApplicationServer>` is the name of the computer on which the Application Server is installed.

<Note>
  For the `https://<ApplicationServer>/FlexiCapture12/Login` web application, anonymous authentication is enabled in IIS, so any user can access the registration page.
</Note>

<Frame>
  <img src="https://mintcdn.com/abbyy/mpS3pcxC_lkohQUS/images/flexi-capture/Registration.png?fit=max&auto=format&n=mpS3pcxC_lkohQUS&q=85&s=89c323ad7b4f98b064bed8c043ba8cf4" alt="Screenshot of the ABBYY FlexiCapture self-registration page, where a new user fills in the registration form and clicks Sign up." width="933" height="578" data-path="images/flexi-capture/Registration.png" />
</Frame>

After the user completes the registration form and clicks the **Sign up** button, they are asked to specify the web stations they need access to. The user is then added to the system and redirected to their personal page.

<Frame>
  <img src="https://mintcdn.com/abbyy/mpS3pcxC_lkohQUS/images/flexi-capture/Personal_page.png?fit=max&auto=format&n=mpS3pcxC_lkohQUS&q=85&s=c8eaebabd532c3fe43bc850c8b6b76a2" alt="Screenshot of a user's personal page in ABBYY FlexiCapture, shown after they complete self-registration." width="931" height="724" data-path="images/flexi-capture/Personal_page.png" />
</Frame>

<a id="userquery" />The administrator processes requests for roles and access permissions on the **Settings → Requests** page of the Administration and Monitoring Console.

<Frame>
  <img src="https://mintcdn.com/abbyy/mpS3pcxC_lkohQUS/images/flexi-capture/Permissions.png?fit=max&auto=format&n=mpS3pcxC_lkohQUS&q=85&s=644e45c6b93d03b157fb7ca0cca18a2c" alt="Screenshot of the Settings → Requests page in the Administration and Monitoring Console, where an administrator processes user requests for roles and access permissions." width="950" height="532" data-path="images/flexi-capture/Permissions.png" />
</Frame>

To process a request for roles and access permissions:

<Steps>
  <Step title="Open the user's page">
    Click **Settings → Users** and then click the user's login in the **Login** column.
  </Step>

  <Step title="Assign roles and permissions">
    On the page that opens, select the necessary roles and access permissions.
  </Step>

  <Step title="Complete the request">
    Click **Settings → Requests** and then click the **Complete** button.
  </Step>
</Steps>

The user can confirm that their request has been processed by clicking the **Processed** link on their personal page.

Once the user's roles and access rights are granted, their personal page lists the available stations. To update the page, the user clicks the **Refresh** button.

## User self-registration (without using the web interface)

This method of adding new users is suitable when only standard IIS authentication is used. It eliminates the need for the administrator to enter user logins manually. Instead, the administrator only assigns roles and grants access rights to logins that already exist.

<Steps>
  <Step title="The user attempts to open a project">
    The user logs in to a station with their Windows login and tries to open a project. The message `Access denied. Contact your administrator.` appears.
  </Step>

  <Step title="The login appears in the console">
    The user's login appears on the **Settings → Users** page of the Administration and Monitoring Console, so the administrator does not have to type it manually.
  </Step>

  <Step title="The administrator grants access">
    The administrator grants the requested roles and access rights to the user.
  </Step>
</Steps>

## Delete users

Delete users on the **Settings → Users** page, and delete user groups on the **Settings → Groups** page. To delete users, select them in the list and click the **Delete** button.

<Note>
  Information about each user is automatically recorded in the database archive. Deleting a user does not affect the statistics included in reports.
</Note>
