Configure Which Visible Users Frontend Managers May Change

QCFUM separates visibility from editability. A user can be shown in the Frontend User Manager because they match a source group while remaining view-only because they do not match an editable group.

Use Users frontend managers may change to define the narrower set of Joomla group memberships that delegated staff are allowed to modify.

Set the Editable Groups

  1. Open Components > QC Frontend User Manager > Settings.
  2. Find Frontend User Manager Settings.
  3. Select the appropriate groups under Users frontend managers may change.
  4. Confirm those users are also covered by Users shown in Frontend User Manager.
  5. Save and test with the exact frontend-manager Joomla group.

Both Source and Editable Rules Must Match

Before QCFUM considers a target editable, the user must match at least one configured source group and at least one configured editable group. QCFUM evaluates the user’s authorized groups, including Joomla ancestor-group relationships, so descendant memberships can satisfy a selected parent rule.

Shown but Not Editable

A user who matches the source set but not the editable set can still be present in delegated results as a view-only record. This is useful when staff need context or lookup access for a wider population but should only change a smaller operational group.

Protection Overrides Editability

Editable-group membership never overrides user protection. QCFUM still blocks the current manager when self-exclusion is enabled, explicitly excluded user IDs, admin-notification recipients when configured for exclusion, protected groups, and accounts with administrative/backend capabilities.

Keep Roles Easy to Reason About

  • Use source groups for who staff may find.
  • Use editable groups for who staff may change.
  • Use protected groups/user IDs for who must never be delegated.
  • Use allowed target groups separately for which direct memberships may be assigned or removed.
  • Do not use a broad editable group as a shortcut around careful source/protection design.

Verify with Three Targets

Test one editable ordinary user, one source-visible but non-editable user, and one protected user. The first should allow only enabled User Manager actions, the second should remain view-only, and the third should stay unavailable/protected.

Community Discussion

Want to compare Joomla user-management safeguards, share practical QCFUM configuration ideas, or discuss how other administrators delegate frontend workflows? Visit the QC Frontend User Manager Community. For private support, bug reports, account-specific entitlement problems, or feature requests, use the QuantaCade support system.