# Mail and user configuration limitation **URL:** \ **Category:** General\ **Created:** [February 10, 2025, 6:34pm UTC](https://forum.gitea.com/t/mail-and-user-configuration-limitation/10765 "2025-02-10T18:34:53Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![narque](https://avatars.discourse-cdn.com/v4/letter/n/47e85d/32.png) [@narque](https://forum.gitea.com/u/narque)\ **Post date:** [February 10, 2025, 6:34pm UTC](https://forum.gitea.com/t/mail-and-user-configuration-limitation/10765/1 "2025-02-10T18:34:53Z")
Hello everyone, I’m in the process of configuring Gitea for the company I work for. I have integrated LDAP for user synchronization and applied certain limitations. Specifically, I don’t want users to be able to configure GPG keys, enable MFA, or change/add email addresses, so I’ve enabled the “EXTERNAL\_USER\_DISABLE\_FEATURES” setting. However, I would like the ability to configure these settings as an admin. Essentially, I want these features to be available, but only usable after going through our security group. Another challenge I’m encountering is that when I disable the following features (deletion, manage\_ssh\_keys, manage\_gpg\_keys, manage\_mfa, manage\_credentials, change\_username, change\_full\_name), I am no longer able to modify email notifications, even as an admin. This creates a dilemma: either I give users unrestricted access to these features, or I lose the ability to manage them altogether. **My questions are:** - Is there a way to enable these features for all users but restrict access, allowing only admins to configure them? - Is it possible to configure standard email notifications for all users (or even per LDAP bind)? Additionally, I use GLPI as our IT Ticket Service, which has a useful feature called “Personificate,” allowing a super-admin to “log in” as a user and view/configure the system as that user. It would be a great feature to have in Gitea as well, as it would simplify debugging and configuration. Thank you in advance for any insights!