---
title: Configuring permissions for widgets
related:
  - https://docs.kentico.com/k81/managing-users/role-management.md
  - https://docs.kentico.com/k81/developing-websites/preparing-widgets-for-users/creating-widgets.md
  - https://docs.kentico.com/k81/developing-websites/preparing-widgets-for-users/setting-up-widget-zones-on-pages.md
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

[Widget](https://docs.kentico.com/k81/developing-websites/preparing-widgets-for-users.md) security works on two separate levels:

- Where can users create instances of the widget?
- Which users (roles) are allowed to work with the widget?

> **Info:** By default, new widgets are forbidden for all zone types and allowed only for authorized roles (without any roles selected). You need to explicitly allow your widgets for specific types of zones and users.

To edit the permissions of a widget:

1. Open the **Widgets** application.
2. Select the widget in the catalog tree.
3. Switch to the **Security** tab.

You can allow widgets for the following locations:

- **In group, editor or user zones** - see [Setting up widget zones on pages](https://docs.kentico.com/k81/developing-websites/preparing-widgets-for-users/setting-up-widget-zones-on-pages.md)
- **In dashboard zones** - users can insert the widget as a component on [widget dashboards](https://docs.kentico.com/k81/configuring-kentico/working-with-widget-dashboards.md)
- **As inline widget** - users can insert the widget into editable text regions via the WYSIWYG editor

and one of the following types of users:

- **Authenticated users** - all logged in users (including on the live site)
- **Global Admin only** - only users with the Global administrator [privilege level](https://docs.kentico.com/k81/managing-users/user-management.md)
- **Authorized roles** - only members of the roles selected in the section below (you can switch between the roles of specific **Sites**)

> **Note:** **Note**: The user permissions do NOT apply for group widget zones. Users who are administrators of groups can work with all widgets that are allowed for group widget zones (on pages owned by the given group). See also: [Customizing group pages using widgets](https://docs.kentico.com/k81/community-features/groups/customizing-group-pages-using-widgets.md)

The security settings only apply when:

- Adding new widget instances
- Configuring the properties of existing widget instances

The system does NOT automatically remove existing instances of widgets if you cancel the permissions for the given zone type or the user who added the widget.

![Configuring permissions for a widget](https://docs.kentico.com/docsassets/k81/configuring-permissions-for-widgets/Widgets_Security.png "Configuring permissions for a widget")