Permission Management

With the release of versions 13.0.0/12.6.0/11.3.0, the permission management was extended. Since then, you define features, AI models and other settings individually for each backend user group.

You can access the permission settings for features and models as follows:

1. Switch to the “Users” module (in TYPO3 12: “Backend Users”)
2. Select “Backend User Groups” from the dropdown
3. Select the backend user group for which you want to adjust the permissions
4. Switch to the “Module Permissions” tab (in TYPO3 12: “Access Rights”)
5. Scroll down to “Custom Module Options” and set the desired permissions

Currently, the following feature permissions can be configured (in the same order as in the backend):

1. AI Plugin in CKEditor / RTE fields
2. AI “Einfache Sprache” Plugin in CKEditor / RTE fields
3. AI translation options within page content translation wizard
4. AI translation options within the list module
5. Show buttons “Translate whole page with AI” within page and list module
6. “Synchronize DeepL glossaries” button within list module
7. Enable translation of file metadata
8. Enable automatic translation of content elements on save
9. Buttons “Generate image with AI”
10. “AI Suite Content” tab in NewContentElementWizard
11. Button “News with AI” (only evaluated if EXT:news is active)
12. Enable pages section within backend module
13. Enable “Agency” section within backend module
14. Show Metadata generation buttons
15. Enable SEO and accessibility audits
16. Enable WorkflowManager section within backend module
17. Enable TaskEngine section within backend module
18. Enable AI Suite toolbar item
19. Enable “Prompt Template” section within backend module
20. Enable “Global Instructions” section within backend module
21. Enable “Global Settings” section within backend module
22. Allow CLI/Scheduler-based workflow execution
23. AI content overview (since versions 14.6.0/13.18.0/12.24.0, see AI Content (EU AI Act))
24. Show usage statistics view

Since versions 14.7.0/13.19.0/12.25.0, these permissions no longer just hide menu entries and buttons. The AI Suite also checks them on every call of the related backend routes. If the permission is missing, it refuses the request with the notice “You do not have permission to use this AI Suite feature.”

Basically, all available models can be restricted by user group. Currently, the following model permissions can be configured.

1. OpenAI
2. Anthropic/Claude
3. GPT Image
4. Midjourney
5. Flux
6. Vision
7. GoogleTranslate
8. DeepL
9. Meta Llama-3.3 (70B-Instruct)
10. Ministral-3-14B-Instruct-2512 (Mittwald AI)
11. Ministral-3-14B-Instruct-2512 (Vision) (Mittwald AI)

Since versions 14.7.0/13.19.0/12.25.0, these permissions no longer just filter the model lists. The AI Suite refuses every request that uses a model the user groups have not granted and reports “Your user group may not use the AI model …”. Administrators are exempt, as are the models set for a feature in the extension configuration (automatic metadata generation on upload, “Einfache Sprache” and audits), and only for that feature.

Here you can set API keys and other configurations for the respective user group. Only the API keys (aiSuiteApiKey, openAiApiKey, anthropicApiKey, aiModelHubApiKey, mittwaldAiModelHubApiKey, googleTranslateApiKey, deeplApiKey, midjourneyApiKey), the free version of the DeepL API (deeplApiMode), the Midjourney ID (midjourneyId) and the storage folder for image and media files (mediaStorageFolder) can be overridden at user group level. All other extension configurations apply to the entire installation. A detailed explanation can be found under “Configuration”.