...
The administrator will be able to log in only from the specified IP addresses. If no address is specified, all addresses will by allowed. If the administrator attempts to log in form an address which is not allowed, the error message “Invalid username or password.“ is displayed and the event is logged in the audit log.
If the application is running behind a proxy, it is necessary to set Trusted proxies in Settings - Configuration - Security, for it to work correctly.
Permissions
The list of permissions, which can be granted to or revoked from the administrator’s account, for details see Administrator permissions.
...