Configuring the Administrative Section in 1C-Bitrix
After installing Bitrix out of the box, the administrative panel operates with default settings — no access restrictions, open access to modules that most employees don't need. As soon as a content manager or sales manager appears in the system, the need arises to adjust the environment for real workflows.
Structure of the Administrative Section
The Bitrix administrative section (/bitrix/admin/) consists of several layers:
- Main menu — generated based on installed modules and prologue settings
- Contextual menu — depends on the current page and user permissions
- Work area — pages for managing content, modules, users
- Notification panel — system messages, updates, tasks
Entry point — /bitrix/modules/main/admin_menu.php, menu items are generated via events OnBuildGlobalMenu and OnBuildAdminMenu.
Key Settings After Installation
Main Module Settings (Settings → Product Settings → Module Settings → Main Module):
- Authorization in the administrative section — recommended to restrict access by IP (
BX_ADMIN_IP) - Administrator session time — default 3600 sec, sufficient for production environment
- Login logging — enable for audit (
/bitrix/admin/security_log.php) - OTP (one-time passwords) — configured via
securitymodule
Visual Environment:
The theme of the administrative section is selected in /bitrix/admin/settings.php. Built-in themes are available. User settings are stored in the b_option table with the ui module.
Prologues and Epilogues
To customize the appearance and behavior of administrative pages, use:
-
/bitrix/php_interface/dbconn.php— database connection parameters -
/bitrix/php_interface/init.php— initialization, event handler registration -
/local/php_interface/init.php— recommended location for custom code
Adding custom items to the administrative menu:
AddEventHandler('main', 'OnBuildGlobalMenu', function(&$globalMenu, &$moduleMenu) {
$moduleMenu[] = [
'parent_menu' => 'global_menu_content',
'sort' => 100,
'text' => 'My Section',
'url' => 'my_admin_page.php',
'more_url' => ['my_admin_page.php'],
];
});
Security of the Administrative Section
Minimum set of measures after setup:
| Setting | Where to configure | Value |
|---|---|---|
| IP Restriction | b_option, module main |
List of allowed IPs |
| CAPTCHA on login | Main Module Settings | Enable |
| Two-factor authentication | security module |
OTP via Google Authenticator |
| HTTPS for admin | .htaccess or nginx |
301 redirect |
| Change admin URL | Custom solution | /my-path/ via routing |
Execution Timeline
Basic administrative section configuration — 2–4 hours. If custom menu, permissions for multiple groups, and integration with external authentication systems are required — up to 1 working day.







