Skip to main content

Configuring Users & Permissions plugin settings

🏗 Work in progress

The content of this page might not be fully up-to-date with Strapi 5 yet.

The Users & Permissions plugin is managed from the Users & Permissions plugin settings section, accessible from Settings icon Settings in the main navigation of the admin panel. This settings section allows to configure the available providers, email templates and the advanced settings of the plugin. It also allows to define the end-users roles and their related permissions (see Configuring end-user roles).

Configuring providers

The Users & Permissions plugin allows to enable and configure providers, for end users to login via a third-party provider to access the content of a front-end application through the Strapi application API. By default, a list of providers is available including one, "Email", enabled by default for all Strapi applications with the Users & Permissions plugin installed.

Providers interfaceProviders interface

To enable and configure a provider:

  1. Go to the Users & Permissions plugin > Providers sub-section of the settings interface.
  2. Click on the provider to enable and configure.
  3. In the provider edition window, click on the ON button of the Enable option.
  4. Fill in the provider's configurations. Each provider has its own specific set of configurations, detailed in our developer documentation (see Setting up the provider).
  5. Click on the Save button.
✏️ Note

Other providers that are not proposed by default by Strapi can be added manually through the code of your Strapi application (see Developer documentation).

Configuring email templates

The Users & Permissions plugin uses 2 email templates, "Email address confirmation" and "Reset password", that are sent to end users:

  • if their account must be confirmed to be activated,
  • if they need to reset the password of their Strapi account.
Email templates interfaceEmail templates interface

To configure and edit email templates:

  1. Go to the Users & Permissions plugin > Email templates sub-section of the settings interface.
  2. Click on the name of the email template to configure and edit.
  3. Configure the email template:
Setting nameInstructions
Shipper nameIndicate the name of the shipper of the email.
Shipper emailIndicate the email address of the shipper of the email.
Response email(optional) Indicate the email address to which responses emails from the end users will be sent.
SubjectWrite the subject of the email. Variables can be used (see Developer documentation).
  1. Edit the content of the email in the "Message" textbox. Email templates content is in HTML and uses variables (see Developer documentation).
  2. Click on the Save button.

Configuring advanced settings

All settings related to the Users & Permissions plugin are managed from the Advanced Settings sub-section, including the choice of a default role for end users, the enablement of sign-ups and email confirmation, as well as the choice of landing page for resetting a password.

Advanced settings interfaceAdvanced settings interface
  1. Go to the Users & Permissions plugin > Advanced settings sub-section of the settings interface.
  2. Configure the settings:
Setting nameInstructions
Default role for authenticated usersClick the drop-down list to choose the default role for new end users.
One account per email addressClick on the ON button to limit to 1 the number of end-user accounts with the same email address. Click on OFF to disable this limitation and allow several end-user accounts to be associated with the same email address (e.g. kai.doe@strapi.io can be used when logging in via several different providers).
Enable sign-upsClick on the ON button to enable end-user sign-ups. Click on OFF to prevent end-user registration to your front-end application(s).
Reset password pageIndicate the URL of the reset password page for your front-end application(s).
Enable email confirmationClick on the ON button to enable end-user account confirmation by sending them a confirmation email. Click on OFF to disable account confirmation.
Redirection urlIndicate the URL of the page where end users should be redirected after confirming their Strapi account.
  1. Click the Save button.