benutzer

id

int

—

User ID (primary key, internal). Often referenced from other tables as user_id — see References from other tables.

supervisor

smallint

—

Supervisor flag: -1 = supervisor with full rights, 0 = regular user (see mng.GetUserAttributes/supervisor).

benutzer

nvarchar

255

User name (login ID). Often referenced from other tables as anleger, archivar, modifyuser, osowner or lockuser — see References from other tables.

passwort

nvarchar

255

Password in encoded form, never in plaintext. On the encoding of the password passed through the API see krn.SessionLogin/UserPwd.

station

nvarchar

255

Assigned station.

logintime

int

—

Time of the last login as a UNIX timestamp (seconds). NULL if the user has never logged in.

server_id

int

—

Home server of the user (0 = no server assigned). Foreign key to server.id.

profil

int

—

benutzer.id of the user serving as the profile user for this user (reference to benutzer.id). Special values:

* -1 — no profile user assigned. * 0 — the user is themselves a profile user. * otherwise — benutzer.id of another user whose settings are inherited.

The settings are not read from the profile user continuously, they are written as copies into osconf when the profile is distributed in the enaio administrator (see profile distribution). Assigning the profile alone, e.g. via mng.SetUserAttributes, does not change osconf (verified).

The profile configuration (which setting categories are active for the profile user) lives in osprofile — resolved in two steps: first look up the benutzer.osguid of the profile user, then match it against osprofile.userid.

geaendert

int

—

Marker for the user profile: 0 = profile not changed, 1 = profile has been changed. When writing via mng.SetUserAttributes the server reads the combination profil = 0 and geaendert = 0 as "drop the profile" (see Notes on Writing). After the profile has been distributed in the enaio administrator the value is 0 (see profile distribution) (verified).

flags

int

—

Status flags (bitmask).

name

nvarchar

255

Full name (display name).

bemerkung

nvarchar

248

Free-text remark.

logincount

int

—

Number of consecutive failed login attempts — not of successful logins. A successful login resets the value to 0; once the threshold is reached it does not grow further.

locked

int

—

Lock status of the account. 0 or NULL = unlocked, 1 = locked by an administrator, 2 = locked by failed logins (see Lockout Behaviour). What enforces the lock is logincount, not this field.

loginstation

nvarchar

255

Last login station.

osguid

nvarchar

32

External GUID of the user. Often referenced from other tables as osuserguid — see References from other tables.

osemail

nvarchar

248

Email address.

account_type

int

—

Type of the user account:

* 0 or NULL — regular user. * 1 — application server / technical server user (automatically created). * 2 — anonymous user (ANONYMOUS, automatically created). * 3 — application server (e.g. Java server). * 4 — installation root user (automatically created).

The attribute account_type in mng.GetUserAttributes carries the same values.

langid

int

—

Preferred language of the user. The Windows client and the webclient store the object definition language selected by the user here: switching it to English changed langid from 7 to 9, switching back to German set 7 again (verified). The UI language, by contrast, is stored in the AS.INI ([CLIENT] LANGUAGE). Foreign key to oslanguages.langid. NULL if no language was selected — in that case the language marked as the active default in oslanguages (active = 2) applies.

validfrom

nvarchar

32

Start of validity of the user account. Date-time format YYYY/MM/DD HH:MM:SS (e.g. 2026/05/24 15:36:07) as text.

validto

nvarchar

32

End of validity of the user account. Date-time format YYYY/MM/DD HH:MM:SS (e.g. 2026/05/24 15:36:07) as text.

osdeptguid

nvarchar

32

GUID of the assigned department.

pwd_changed

int

—

Timestamp of last password change (UNIX time).

never_expire

int

—

Flag: password does not expire. Affects only the password — validfrom/validto are unaffected by it (see Context Switch Errors).

changepwd

int

—

Flag: user must change password on next login.

mfauthflag

smallint

—

MFA activation flag.

mfauthsecret

nvarchar

255

MFA secret (TOTP seed or similar).

loginname

nvarchar

255

Login name (may differ from benutzer, e.g. AD login).

externid

nvarchar

255

External ID (for SSO / identity-provider mapping).

benutzer.id (int)

user_id, benutzer_id, anleger_id, empfaenger_id, lockuser

doclock.user_id, annotations.user_id, bgrel.benutzer_id, mappe.anleger_id / mappe.empfaenger_id

benutzer.osguid (nvarchar(32))

osuserguid, osowner

bgrel.osuserguid, objectX.osowner / stammX.osowner / registerX.osowner (see Document objects). The principal value (value) in the objectXr/stammXr/registerXr rights tables can also be a user GUID.

benutzer.benutzer (nvarchar(255), login name)

anleger, archivar, modifyuser, osowner, lockuser

objectX.anleger, objectX.archivar, objectX.modifyuser (see Document objects); mappe.anleger / mappe.empfaenger; annotations via user_id