Return

Using user roles

Control what users can see and do by assigning roles and checking them in your app.

Steps at a glance

1. Create roles in the Authentication subtab of Data & API.
2. Assign roles to users.
3. Use roles to protect pages and APIs.

1) Create roles

1. Open the Data & API tab, then open the Authentication subtab.
2. Go to Roles.
3. Create roles that match your needs (for example admin, member).

2) Assign roles to users

1. Open the Data & API tab, then open the Authentication subtab and go to Users.
2. Select a user.
3. Assign the appropriate roles.

3) Use roles in your app

• Protect pages so only certain roles can open them.
• Secure API endpoints with Security settings (and optional Middlewares for custom role checks) so only allowed roles can access sensitive data.

Common pitfalls

A user is signed in but still blocked

• Confirm they actually have the role assigned.
• Confirm the page or API is checking the same role name.

Related guides

Securing APIs

Protect your APIs so only the right users can access sensitive data.

Beginner7 min

Protect a page for signed-in users

Restrict page access and configure redirects for unauthenticated users.

Beginner4 min