Users & Access

InlineCMS manages its own editors. There’s no need to wire it into your app’s existing user system — you invite people into the project, give them a role (and optionally scope them to specific page URLs), and they edit your live pages through the InlineCMS toolbar.

The first user

When you set up an InlineCMS instance (self-hosted or cloud), the setup flow creates your admin account and your project. That admin can then invite everyone else.

Everyone signs in with email and password by default. Self-hosters can also enable Continue with Google / GitHub for the dashboard login — see OAuth Sign-In. (OAuth signs invited users in; it never creates new accounts.)

Roles

Every user has one role:

Role	Can do
admin	Everything: manage users, settings, and edit any page
editor	Edit and publish content (optionally limited to certain URLs)
viewer	Sign in and see drafts, but not edit

Invite users and change roles from Team in the dashboard.

Scoping an editor to specific URLs

By default an editor can edit every page. To limit one to part of the site, give them a set of allowed paths. A path can be exact or use glob wildcards:

Pattern	Matches	Doesn’t match
/about	/about	/about/team
/blog/*	/blog/post	/blog/post/comments
/blog/**	/blog/post, /blog/post/comments	/blog

• * matches within a single path segment.
• ** matches across segments (a whole subtree).
• To grant a page and everything under it, list both: /blog, /blog/**.

Matching is case-insensitive and ignores trailing slashes. Leave the list empty for full-site access. Admins are never scoped — they can always edit any page.

Scoping is enforced on the server (writes to an out-of-scope page are rejected) and in the SDK — a scoped editor simply sees View only in the toolbar on pages they can’t edit, with no edit affordances.

How an editor edits a live page

1. The editor signs into the InlineCMS dashboard.
2. They open the page they want to change and choose Enable editing on this site. This mints a short-lived, single-use token bound to that site’s origin.
3. They land on the live page already authenticated, and the InlineCMS toolbar appears. Clicking Edit page enters edit mode; clicking any inline-cms element edits it in place.
4. Save draft keeps changes private; Publish makes them live.