---
title: User internals and API
related:
  - https://docs.kentico.com/13/managing-users/user-management.md
  - https://docs.kentico.com/13/custom-development/handling-global-events/handling-custom-administration-authentication.md
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

## Database tables

The following database tables store user data:

| Database table         | Description                                                                                                                                                                                                                                                                                                                                                 |
| ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| CMS\_User              | Stores records representing [users](https://docs.kentico.com/13/managing-users/user-management.md).                                                                                                                                                                                                                                                         |
| CMS\_UserSettings      | Stores the advanced settings of user accounts.                                                                                                                                                                                                                                                                                                              |
| CMS\_UserSite          | Stores relationships between users and [sites](https://docs.kentico.com/13/configuring-xperience/managing-sites.md). Each entry indicates that a specific user account is available on a given site.                                                                                                                                                        |
| CMS\_UserCulture       | Stores relationships between users and cultures. Each entry indicates that a user may edit the content of documents belonging to a specified culture/language (if the given user has the Editor privilege level).                                                                                                                                           |
| CMS\_UserMacroIdentity | Security signature used when signing [macro expressions](https://docs.kentico.com/13/macro-expressions.md). Signatures prevent macros from accessing or displaying data for which the author is not authorized. See [Working with macro signatures](https://docs.kentico.com/13/macro-expressions/troubleshooting-macros/working-with-macro-signatures.md). |

![](https://docs.kentico.com/docsassets/13/user-internals-and-api/UsersDatabaseDiagram.png)

The following database tables store the data of user roles, permissions and memberships:

| Database table       | Description                                                                                                                                                                                                                                                                                                                                        |
| -------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| CMS\_Role            | Stores records representing [roles](https://docs.kentico.com/13/managing-users/role-management.md).                                                                                                                                                                                                                                                |
| CMS\_UserRole        | Stores relationships between users and [roles](https://docs.kentico.com/13/managing-users/role-management.md). Each entry indicates that a specific role is assigned to a given user. Also stores the expiration date for roles that are assigned for a limited time period.                                                                       |
| CMS\_Membership      | Stores records representing [memberships](https://docs.kentico.com/13/managing-users/membership-management.md).                                                                                                                                                                                                                                    |
| CMS\_MembershipUser  | Stores relationships between users and memberships. Each entry indicates that a user belongs to a specific membership. Also stores the expiration date for roles that are assigned for a limited time period.                                                                                                                                      |
| CMS\_MembershipRole  | Stores relationships between roles and memberships. Each entry indicates that a membership includes a specific role.                                                                                                                                                                                                                               |
| CMS\_Permission      | Stores the system's [permissions](https://docs.kentico.com/13/managing-users/configuring-permissions.md).                                                                                                                                                                                                                                          |
| CMS\_RolePermission  | Stores relationships between roles and permissions. Each entry indicates that a role has a specific permission.                                                                                                                                                                                                                                    |
| CMS\_RoleUIElement   | Stores [UI personalization](https://docs.kentico.com/13/managing-users/ui-personalization.md) settings for roles.                                                                                                                                                                                                                                  |
| CMS\_RoleApplication | Stores the default application content of the system dashboard for individual roles (the system uses [UI elements](https://docs.kentico.com/13/custom-development/creating-custom-modules/reference-managing-ui-elements.md) to represent applications).<br>Users can individually adjust their own dashboard and override these default settings. |
| CMS\_ACLItem         | Stores [page-level permissions](https://docs.kentico.com/13/managing-users/configuring-permissions/configuring-page-permissions/page-level-permissions-acls.md), and their relationships with users or roles.                                                                                                                                      |
| CMS\_ACL             | Stores relationships between ACL items and individual pages (tree nodes).                                                                                                                                                                                                                                                                          |

![](https://docs.kentico.com/docsassets/13/user-internals-and-api/Role_DB_Diagram.png)