File: Web.Config <configuration> <system.web> <authorization> <allow roles="Managers"/> <deny users="*"/> </authorization> </system.web> </configuration>