# Manager Advanced Settings and Limits

These fields are at the bottom of the manager form and are shown to **system administrators** only (Group, Site and Allowed PPP Services need their own permissions).

## Advanced Information

<table id="bkmrk-fielddescription-sub" style="width: 100%;"><thead><tr><th style="width: 19.1555%;">Field</th><th style="width: 80.8198%;">Description</th></tr></thead><tbody><tr><td style="width: 19.1555%;">Subscribers Prefix / Subscribers Suffix</td><td style="width: 80.8198%;">Text added automatically before / after the username of every new subscriber created for this manager. Example: prefix <code>ab&#45;</code> + username <code>john</code> = <code>ab&#45;john</code>. Existing users are not changed.</td></tr><tr><td style="width: 19.1555%;">Group</td><td style="width: 80.8198%;">The manager's group (needs *Groups - Assign*). See [Assign to Site and Group](https://help.snono-systems.com/books/sas-radius/page/assign-to-site-and-group).</td></tr><tr><td style="width: 19.1555%;">Site</td><td style="width: 80.8198%;">The manager's site (needs *Settings - Sites Management*).</td></tr><tr><td style="width: 19.1555%;">Debt Limit</td><td style="width: 80.8198%;">How far the manager's balance may go **below zero**. Example: Debt Limit 100 = the manager can keep activating until the balance reaches −100. Default 0.</td></tr><tr><td style="width: 19.1555%;">Discount Rate (%)</td><td style="width: 80.8198%;">A discount on this manager's profile prices when activating subscribers. With a discount, the full amount goes to the admin and parent managers don't receive a commission.</td></tr><tr><td style="width: 19.1555%;">Address List</td><td style="width: 80.8198%;">A MikroTik firewall address list. Sessions of this manager's subscribers are added to it, for example to route a reseller's subscribers differently.</td></tr><tr><td style="width: 19.1555%;">Allowed PPP Services</td><td style="width: 80.8198%;">Limit the manager's subscribers to certain PPPoE service names (needs *Managers - Lock managers to PPP service*). Can be set only after the manager is saved; each change is saved immediately.</td></tr><tr><td style="width: 19.1555%;">Allowed NAS(s)</td><td style="width: 80.8198%;">The routers (NAS) this manager's subscribers may connect through. Leave empty for no restriction.</td></tr><tr><td style="width: 19.1555%;">Requires Two Factor Auth</td><td style="width: 80.8198%;">Asks for a code from an authenticator app at login. The manager must first set up 2FA in their profile. Turn it off to help a manager who lost their phone. See [My Profile, Password and 2FA](https://help.snono-systems.com/books/sas-radius/page/my-profile-password-and-2fa).</td></tr><tr><td style="width: 19.1555%;">Ignore Captcha</td><td style="width: 80.8198%;">Skip the login captcha for this manager (when the captcha is enabled in Settings).</td></tr><tr><td style="width: 19.1555%;">Admin Notes</td><td style="width: 80.8198%;">Private notes for administrators. Add them when editing the manager.</td></tr><tr><td style="width: 19.1555%;">Force Password Change</td><td style="width: 80.8198%;">The manager must choose a new password the next time they open the panel.</td></tr></tbody></table>

## Manager Limits

Limits count the actions this manager performs on **subscribers** in the current calendar month. Turn the switch on and set the monthly number. When the limit is reached the action is refused with *access denied*.

<table id="bkmrk-limitcounts-limit-de"><thead><tr><th>Limit</th><th>Counts</th></tr></thead><tbody><tr><td>Limit Deletes / Monthly Deletes</td><td>Subscriber deletions.</td></tr><tr><td>Limit Renames / Monthly Renames</td><td>Subscriber renames.</td></tr><tr><td>Limit Profiles Changes / Monthly Profile Changes</td><td>Subscriber profile changes.</td></tr><tr><td>Limit MAC changes / Monthly MAC Changes</td><td>MAC address changes, per subscriber.</td></tr><tr><td>Max number of users</td><td>Maximum number of subscribers the manager can own directly (0 = unlimited). When reached, creating a user shows *Exceeded Users Limit*.</td></tr></tbody></table>

*Required permission: Managers - System Administrator*