 <p>User roles then setup the locations in web.config</p> <pre><code>&lt;location path="foo"&gt; &lt;system.web&gt; &lt;authorization&gt; &lt;allow roles="fooUsers"/&gt; &lt;deny users="*"/&gt; &lt;/authorization&gt; &lt;/system.web&gt; &lt;/location&gt; </code></pre> <p>OR for each folder created add a new web.config to folder root</p> <pre><code>&lt;?xml version="1.0"?&gt; &lt;configuration&gt; &lt;system.web&gt; &lt;authorization&gt; &lt;allow roles="folderUsers"/&gt; &lt;deny users="*" /&gt; &lt;/authorization&gt; &lt;/system.web&gt; &lt;/configuration&gt; </code></pre>