When creating authorization rules, you can authorize by user role. File: SecretFiles\Web.Config <configuration> <system.web> <authorization> <allow roles="Administrator"/> <deny users="*"/> </authorization> </system.web> </configuration>