"Access denied" message when logging into the backend

When logging into the formcycle backend, you may receive an "Access denied" message.

This message appears when a user logs in via a login service configured for the login screen but is not assigned to a role in any client. Users can be assigned roles via user settings in the client. There are two ways to do this:

1. Direct assignment of the user profile to a client by inviting the user.
2. Indirectly assign the user to the client using user filter.

For more details, see User settings in the client.

If the user cannot access the backend, please check the following:

• Is the user assigned to a client directly or via a user filter?
• Is a role assigned to the user or the user filter?
• Are the filter conditions of the user filter configured correctly? For more information on configuring, see User filters.
• Is the selected login service linked to the user's profile?
  Example: A profile already exists for the user, which is linked to a role and a client. If the user logs in with a login service that has not (yet) been linked to the user profile, they will not be granted access.
  System administrators can check which external accounts (or accounts from login services) are linked to the user profile via System settings > User management > Users.
  The automatic connection of external accounts to the formcycle user profile can be activated under System settings > General. This automatically connects external user accounts from login services to formcycle user profiles based on the user's email address. This requires that the email address of the formcycle profile has been verified and that the login service correctly assigns and returns the email address. For more information, see User settings under System settings.