Access

Access Control

The Access Control page lets you manage authentication and visibility settings for every page on your site. Configure who can view each page—whether it's public, password-protected, restricted to members, or limited to specific access groups.

Accessing the Access Control Page

From your site dashboard, navigate to Access Control in the sidebar. The page displays your site's page tree as an interactive table with three columns:

  • Page — The page title and slug

  • Access Control — The authentication method for that page

  • Visibility — Who can see the page among authorized users

Understanding the Page Tree

The Access Control editor shows your entire site structure as a hierarchical tree. Parent pages and their children are organized by URL path. Each row represents a single page with its own access control and visibility settings.

Use the search box to Filter by title or slug... to quickly find specific pages. Collapse all and Expand all buttons help you navigate large page trees.

Inherited Settings

Child pages often inherit their access control settings from parent pages. Inherited rows display Using parent's settings — choose to override. Click this message to set custom access control for that page, breaking the inheritance.

Access Control Methods

Click any Access Control cell to open the authentication dropdown. Choose from four options:

Public

Anyone can view the page without logging in. This is the default for new pages. Public pages are visible to all visitors and don't require any authentication.

Password

Visitors must enter a password to view the page. When you select Password, a configuration popover appears:

  1. Click Set password to open the password dialog

  2. Enter a password in the Page Password field (minimum 8 characters)

  3. Click Save Password

After setting a password, the cell shows Password set. Click Change password to update it. Passwords are encrypted and stored securely.

Password protection requires the accessControlPassword feature. Starter plans and above include this capability.

Sign Up / Login

Visitors must sign up or log in with their email to view the page. This creates a membership record for each visitor and is ideal for building your audience while keeping content gated.

When you select Sign Up / Login, an access groups picker appears. Choose which groups can access the page:

  • All Members — Every registered member (always included, cannot be removed)

  • Individual Member — Grants access to specific members you select individually

  • Custom groups — Access groups you've created through the Access Groups page

Click Select groups to open the group picker. Each group shows its member count. Toggle groups on or off, then click Done to apply your selection.

Need to grant access to individual members rather than entire groups? Select Individual Member from the group picker, then search and select specific members by email.

Invite Only

Only members on your email allowlist can view the page. This is the most restrictive option—visitors cannot sign up on their own. You control exactly who has access.

Like Sign Up / Login, Invite Only shows the access groups picker. Select which groups can access the page. Members must exist in your member list before they can access invite-only content.

Email signup/login and Invite Only access require the accessControlFull feature. Pro plans and above include full membership management.

Visibility Settings

Visibility controls who can see a page among users who are already authorized. Click any Visibility cell to choose from three options:

Visible

All authorized members can view the page. This is the default and most permissive option. Use this for content everyone should see.

Hidden

The page returns a 404 error for all members. Use Hidden to temporarily remove pages from your site without deleting them from Notion, or to prepare pages before making them available.

Group Only

Only members in selected access groups can view the page. This enables scoped access—different members see different pages based on their group membership.

Group Only is only available for pages using Sign Up / Login or Invite Only access control. Public and Password-protected pages cannot use Group Only visibility.

When using Group Only visibility, the visibility groups must be a subset of the page's access groups. You cannot grant visibility to groups that don't have access to the page.

How Changes Are Saved

The Access Control editor automatically saves your changes. After you modify an access control or visibility setting, the page saves within approximately one second. You'll see a confirmation message: Access control saved.

The page count at the top shows the total pages in your tree. If you have unsaved changes, a changes badge appears until saving completes.

If saving fails, you'll see Failed to save access control. Try again or refresh the page to retry.

Creating Access Groups from the Picker

If no groups exist or you need a new one, click Create Access Group at the bottom of the group picker. This opens the Access Groups page in a new tab where you can create and configure groups before returning to Access Control.

Troubleshooting

The page shows "No page tree generated yet"

Your site's page structure hasn't been synchronized from Notion. Go to the Overview tab in your site dashboard to generate the page tree. After the tree is built, return to Access Control to configure settings.

I see "Failed to load page tree"

The page tree couldn't be loaded from the server. Click Retry to try again. If the problem persists, check that your Notion connection is active and regenerate the page tree from the Overview tab.

Password validation fails

Passwords must be at least 8 characters. The validation message Password must be at least 8 characters appears when the requirement isn't met. Enter a longer password and try again.

Group Only visibility is disabled

Group Only visibility only works with Sign Up / Login or Invite Only access control. Public pages and password-protected pages cannot use group-based visibility. Change the access control method first.

Was this helpful?