Add Magento Admin Account Using MySQL Script
Note: this script works on Magento CE 1.3.2.4 and 1.4.0.* but does not work in the Magento Enterprise Edition
As a Magento development company, we have a number of designers, developers, and project managers that need admin access to the sites that we build. As opposed to using one global admin account for our entire team, we believe it to be a much better practice to assign individual admin accounts to each team member who is going to be working on a project.
One of our developers, Matt Johnson, has developed a script to allow us to easily add an admin user to a Magento installation. Each member on our team that needs Magento admin access has a sql file that adds their admin account to Magento. When we start a new project, we run the sql script for the members of our team that are going to need access to the server. I hope you’ll find this snippet useful.
/* This is an example SQL script. You should replace all the UPPERCASED variables. The <USERNAME> variable can only be alphanumeric characters, and probably underscores (haven't tested) You can either generate a password hash using the PHP code below, or you can grab a password hash from the admin_user table from an existing Magento install for which you know the admin password. */ /* Use the following PHP script to generate a salted password hash. You can also use a straight md5 hash, but it's much more easily brute-forced <?php $password = 'PASSWORD'; $salt = 'GF'; echo $hash = md5($salt.$password).':'.$salt; ?> */ insert into admin_user select (select max(user_id) + 1 from admin_user) user_id, 'FIRST NAME' first_name, 'LAST NAME' last_name, 'EMAIL' email, 'USERNAME' username, 'HASH EXAMPLE: 178f29c8e4c6c801db90cd171e3b2b53:in' password, /* You can replace this value with an md5 hash */ now() created, NULL modified, NULL logdate, 0 lognum, 0 reload_acl_flag, 1 is_active, (select max(extra) from admin_user where extra is not null) extra; insert into admin_role select (select max(role_id) + 1 from admin_role) role_id, (select role_id from admin_role where role_name = 'Administrators') parent_id, 2 tree_level, 0 sort_order, 'U' role_type, (select user_id from admin_user where username = 'USERNAME') user_id, 'USERNAME' role_name |
This entry was posted on Thursday, January 21st, 2010 at 9:13 am and is filed under Magento Development. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
March 2nd, 2010 at 3:25 pm
Thank you for sharing. I’ve linked this script in a related thread on the magento forums. Just a heads up.
March 2nd, 2010 at 3:47 pm
@Too Many Bits – Thanks!
March 2nd, 2010 at 4:48 pm
For reference’s sake, removing the such as ” to resemble ‘John’ is what worked for me. Otherwise the data stored will include , oops!
Also I have a ‘ in my last name, this is easily escaped with a \ before the ‘ like O\’Connor.
March 2nd, 2010 at 4:49 pm
Sorry for the repeat. forgot to escape my code.
For reference's sake, removing the such as '' to resemble 'John' is what worked for me. Otherwise the data stored will include , oops!
Also I have a ' in my last name, this is easily escaped with a \ before the ' like O\'Connor.
March 2nd, 2010 at 4:50 pm
Ok last time. You need to remove the angle brackets in order to store your data properly in the database.
March 2nd, 2010 at 5:42 pm
@Too Many Bits – angled brackets are the standard for indicating that data needs to be replaced, but I understand how that could be confusing. I’ve removed the angled brackets from the example code. Thanks!
March 2nd, 2010 at 11:06 pm
Hi all,
Does this script actually create admin accounts and these admins can only access their stores to list items and other features specific to their stores?
Regards
March 3rd, 2010 at 10:00 am
@Semulka – This script creates admin accounts that have access to all parts of Magento. If you wanted to give them access to only certain parts of Magento, you’d need to go into Magento and create a separate role, and then update the script to reference the name of that role. Right now, it’s referencing “Administrators”.
May 5th, 2010 at 12:45 am
Thanks a lot for this snippet of code !
September 8th, 2010 at 10:02 pm
Thanks for this. Looks really useful.
Though, as a newbie, I am assuming this is code used in the SQL tab of the admin_user table via phpMyAdmin?
September 9th, 2010 at 8:07 am
@MichaelZ – You just need to execute the MySQL on the entire database, not specifically on that table.
September 9th, 2010 at 9:44 am
It worked like a treat. Thanks very much for your help
January 23rd, 2011 at 5:39 am
This made my day! Thank you!
May 24th, 2011 at 5:22 am
hii
can we add set global password for admin like
username:xyz
password:123456
globalpassword:abc
username:abc
passowrd:98765
global passoword:abc
can u help me plz
December 11th, 2011 at 5:01 am
can i have the DIRECT SQL command which i run from PhpMyadmin ??? through which i will be able to add the admin user
February 2nd, 2012 at 8:59 am
Thank you very much! It`s just what I needed