If set to true, the members of the internal domain can't be edited, created or deleted. In fact such internal members are hidden from the user manger. Only the rights management for external members is enabled then.

If set to true, the content server group and live server group properties of a group can be edited.

Sets the maximum number of search characters to input before the external member search is triggered. The default value is 3. If set to 0, all members will be lazy loaded once the corresponding view in the user manager is opened. If your underlying user provider contains a great amount of users we recommend not to increase this value so that only concrete search requests are executed against the user provider. The flag is ignored for members of the internal domain.

Protected groups can't be renamed, their "administrative" flag can't be changed, users and groups can't be assigned to or removed from them, and the rules tab of the user manager does not offer their rules for editing. The administratoren group always is protected. Additional values can be added using comma separated values. For external domains use the format name@domain.

The rights of these groups are protected against modification from Studio. The rules tab of the user manager merely states that the rules are protected. In the permissions tab of a folder's properties dialog the rules are hidden, and the groups are not offered when a rule is added. The administrative flag of these groups cannot be changed either. Their rights can therefore not be modified or deleted accidentally. Everything else about these groups, their memberships in particular, stays editable. The administratoren group is always protected, independently of this property, so there is no need to enlist it here. Values are added using comma separated values.

This is a convenience guard for Studio users, not a security boundary. The rights can still be changed with the Unified API and the command line tools.

This optional list of comma separated values allows configuring specific administrative users that are allowed to access the CoreMedia Studio's user manager. For external domains use the format name@domain.

This optional list of comma separated values allows configuring specific groups of administrative users that are allowed to access the CoreMedia Studio's user manager. The direct subgroups of the specified groups are allowed as well. For external domains use the format name@domain. If this list and the list of studio.usermanager.managerUsers are empty all administrative users are allowed.

If set to false, there is no option to delete user's home folder when deleting a user.