Login works. Now, let’s handle Roles

No dark-mode styles — this email renders the same in a dark client.

Hi Emre,

Great job - your login flow is working. 🎉

Now let’s talk about how to control what your users can actually do in your app.

A common question we hear from developers: How to implement access control?

Here’s how to do it with ZITADEL:

- ZITADEL handles the Roles (RBAC): It tells your app that "User A is an admin."
- Your Application handles the Permissions: Your logic decides if an admin is allowed to "delete this specific resource."

By keeping roles in ZITADEL and resource-level logic in your code, you stay OIDC-compliant while keeping your user management centralized.

Ready to define your first roles? Learn how to set up roles (e.g., admin, editor), and enable the right settings to get them for your user.

Go to Roles Guide in Docs (https://djX2BV04.eu1.hubspotlinks.com/Ctc/5H+113/djX2BV04/VVpRht3j2Bq_W4wWx_89gDp_hW6tdK5Q5XnTTkN2C5cxF5n4LbW50kH_H6lZ3lGW5GxM1048_HmnW8-Jz8k5DB-S_W9hDSXc1Nnx9LW92Nwv15ryzmPW2pkk0J9lSG2hW7qLp-c245BxcW4DDt5t6BG6FXW9cvnln4cgmk8W8bH-Z03tJp9sV7mJK13yqnp8W9cDPBL3yStNYW2RMp207C09FJW6bnypt3ZchKXW1XGNR98mGnftW67Njc58-5qYkW6J7FPK3JGXRVW2mRhvs5Hw236W5XG-Vx2mX6gQW94nZ5q68JQ06W5Yw4Kw69fvkBW4T3f988X86rpVc6Q5W3fvFJlVjDV0w65c9nsVz-xL44Vm8zTW7XXY946TfffLW6q1RGb6QQQ3LW2k8w822HwNDrW524b_F4b8ZtsW2y924_6BmqmlW3wRXT614KFqmW5h9wcD7SKJs0N3jwK-9H53jjd_gyxH04 )

Need a hand? If you’re trying to map a complex permission set to ZITADEL roles, just reply here. I’m happy to look at your architecture with you.

Cheers,

Fabienne

ZITADEL, Inc., 1 Embarcadero Center, Suite 1200, San Francisco, California 94111, United States

Unsubscribe (https://hs-143772185.s.hubspotemail-eu1.net/hs/preferences-center/en/direct?data=W2nVjwf3Y2x55W1Vp9t_2nYjz5W1_c2954kbcR_W30CgT021gD6kW34prJJ4m9Y_gW4fP_FT43F19yW45G6Vm2H-T7vW38by273_ws0wW1Lzk9C1BwVbBW3V-zYx2FzwKnW2t1HfQ2CqTq4W49QRm6386vmlW3SXTCd1BH-_-W4fK1gd45kcYNW2r8YZL1QCrRCW3QV68q4rq0RtW3GJ5X-30kd-5W1Zg6ry2KS4MFW1SdG_W1_r4rcW3S-RM81LCRyfW3NXVwn3VG4vqW1QC3_j38dggwW2PLLy33BPcJzW3G-x_z4kqGy7W3_XSBw34zyBKW3NR0G-1N6ShnW2sD_z33ZvLyRW32GpBL3LDql_W3_rDBX47py9pW32DF7Q4prwZCW3j6tZq2CxJk1W3dqbt-3ZNM7-W32cc3z4mytt7W4mqpnG3T5vBSW3bbMyd3KbrCHW3H6VDp1NFKnLW2-cGGS36kYl7W41PCj22PmN0CW2CsryY3NP1cHW3gtS1f43N8CbW43SLQZ2CsVD2W34nCcz2YJDxyW1Bm6Ct2zG_wvW3KcG5c34zwMLW2KyMfR2xHBzBW234MXb3R4q_JW1V9vbf2p2vTKW1Xf6Xz4cjbTFW4tf-Zn306V1KW4kM6w73G-9YbW1VnqN52WdTtKW4mL-Cb2qVYc9W3BJFtt3bs9PqW3yMKNw3byxl5W23kgXf38BnKcW4rBH733NTzvyW2xXR5D2FGZ_pW4hcDgC3gqRmTW1Lnk521ZvC96W3BXbTN1X6S3lW2xwQtr2vHPK4W3jnc4d3VKv3hW216dh-2HK9tCW3yZ5Bn3bhlDr0&_hsenc=p2ANqtz-9Yp88Y9W00ec87uIReo9hnKsRv0vfwIrdgOM5KUjTF6CQ4i3Kx484ci_ZGO20bZw8-QB-0PvEs86CU6tcoLihL2QQoERBeIlVbisb_Qmufp6Xn82AwROu6DyGoPvZUKY884mO4&_hsmi=130516067 )
Manage preferences (https://hs-143772185.s.hubspotemail-eu1.net/hs/preferences-center/en/page?data=W2nVjwf3Y2x55W1Vp9t_2nYjz5W1_c2954kbcR_W30CgT021gD6kW34prJJ4m9Y_gW4fP_FT43F19yW45G6Vm2H-T7vW38by273_ws0wW1Lzk9C1BwVbBW3V-zYx2FzwKnW2t1HfQ2CqTq4W49QRm6386vmlW3SXTCd1BH-_-W4fK1gd45kcYNW2r8YZL1QCrRCW3QV68q4rq0RtW3GJ5X-30kd-5W1Zg6ry2KS4MFW1SdG_W1_r4rcW3S-RM81LCRyfW3NXVwn3VG4vqW1QC3_j38dggwW2PLLy33BPcJzW3G-x_z4kqGy7W3_XSBw34zyBKW3NR0G-1N6ShnW2sD_z33ZvLyRW32GpBL3LDql_W3_rDBX47py9pW32DF7Q4prwZCW3j6tZq2CxJk1W3dqbt-3ZNM7-W32cc3z4mytt7W4mqpnG3T5vBSW3bbMyd3KbrCHW3H6VDp1NFKnLW2-cGGS36kYl7W41PCj22PmN0CW2CsryY3NP1cHW3gtS1f43N8CbW43SLQZ2CsVD2W34nCcz2YJDxyW1Bm6Ct2zG_wvW3KcG5c34zwMLW2KyMfR2xHBzBW234MXb3R4q_JW1V9vbf2p2vTKW1Xf6Xz4cjbTFW4tf-Zn306V1KW4kM6w73G-9YbW1VnqN52WdTtKW4mL-Cb2qVYc9W3BJFtt3bs9PqW3yMKNw3byxl5W23kgXf38BnKcW4rBH733NTzvyW2xXR5D2FGZ_pW4hcDgC3gqRmTW1Lnk521ZvC96W3BXbTN1X6S3lW2xwQtr2vHPK4W3jnc4d3VKv3hW216dh-2HK9tCW3yZ5Bn3bhlDr0&_hsenc=p2ANqtz-9Yp88Y9W00ec87uIReo9hnKsRv0vfwIrdgOM5KUjTF6CQ4i3Kx484ci_ZGO20bZw8-QB-0PvEs86CU6tcoLihL2QQoERBeIlVbisb_Qmufp6Xn82AwROu6DyGoPvZUKY884mO4&_hsmi=130516067 )

Accession

nse/zitadel/2026-11-15/7013

From

Fabienne Bühler · fabienne@zitadel.com

Sent

15 November 2026 · 12:00 UTC