Users, Roles, Permissions

Learn how to create users in Strapi and assign roles to content editors.

Roles

Strapi provides three roles which dictate the permissions that individual users have. Additional roles cannot be created nor can their permissions be altered. All roles are listed below with a brief description of their permissions:

• Author: can create, read, update and delete entries into all collection types.
• Editor: has all permissions of an Author but can also publish new content
• Super Admin: has all permissions of an Editor but can create, update and delete users as well as configure the layout of components.

Roles can be assigned by Super Admins either at user creation or at any time thereafter.

Users

There are two types of Users in Strapi:

• Admin Users: Admin users are those who have access to the Strapi dashboard and can create, edit, and delete content.
• End Users: End users are those who interact with the content created by Admin users that requires a log in (such as drafts).

End Users

End users are treated like any other content type in Strapi. They can be created, updated, and deleted in the same way as any other content type.

A list of Users can be found in the User Collection Type:

Here, end users can be created, updated, and deleted.

Admin Users

A list of admin users can be accessed by:

1. Click the Setting icon in the left hand toolbar

2. Select "Users" under "Administration Panel" (see below)

   

   From the Users page, the roles of users can be assigned and emails/passwords changed.

Creating a new Admin User account

On the top right side of the Administration panel > Users interface, an Invite new user button is displayed. It allows to create a new administrator account on Strapi. To create a new account:

1. Click on the Invite new user button.

2. In the Invite new user window, fill in the Details information about the new user:

3. Fill in the Login settings about the user:

   • User's roles (mandatory): Mandatory and are selected/assigned from the drop-down list the role to attribute to the new administrator.

4. Click on the Invite user button in the bottom right corner of the Add new user window.

5. A URL appears at the top of the window: it is the URL to send the new user for them to log in for the first time to Strapi. Click the copy button to copy the URL.

   ⚠️

   In order for the new user to create their account, you need to manually send the link to them. Strapi will not automatically send an email to them with the link.

6. Click on the Finish button in the bottom right corner to finish the new user account creation. The new user should now be listed in the table (seen in image at beginning of Users section.

   The new user invitation URL is accessible from the administrator account until it has been activated.

Deleting a new Admin User account

User accounts can be deleted from the Administration panel > Users interface. It is possible to delete one or several administrator accounts at the same time.

To delete a user:

1. Tick the box(es) on the left side of the user’s records then click on the Delete button above the table.
2. In the deletion window, click on the Confirm button to confirm the deletion.

Editing an an Admin User Account

The table displayed in the Administration panel > Users interface allows to access all information regarding each administrator, where it is also possible to edit that information.

To edit an administrator account:

1. Click on the name of the administrator whose account you want to edit.
2. In the Details area, edit your chosen account details:

3. (optional) In the Login settings area, edit the role of the administrator:

• Click on the drop-down list to choose a new role, and/or add it to the already attributed one.
• Click on the delete button to delete an already attributed role.

1. Click on the Save button in the top right corner.