> ## Documentation Index
> Fetch the complete documentation index at: https://www.twicecommerce.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Settings - Security

> Control which sign-in methods your team can use and configure the security restrictions bypass.

export const userRoleDefinition = "What a user can see and do. Each user has one built-in system role — Owner, Admin, Manager, or Member — and can also be assigned any number of custom roles you create with specific permissions. Effective access is the combination of all their roles.";

<Frame caption="Settings > Security">
  <img src="https://mintcdn.com/twicecommerce/lZhc_tO8u1u_bL0Q/images/settings-security.webp?fit=max&auto=format&n=lZhc_tO8u1u_bL0Q&q=85&s=9b32e9a2618f6cfb4101c25a3f6cd438" alt="Security settings page" width="1920" height="1080" data-path="images/settings-security.webp" />
</Frame>

<Info>
  This view can look different dependent on your user role. <br />See [Visibility & Permissions](#visibility-and-permissions) for details.
</Info>

## Primary Purpose

Control how your team signs in to the admin.

<AccordionGroup>
  <Accordion title="Sign-in methods">
    Choose which methods users can sign in with: **Email & Password**, **Google**, **Microsoft**, or **Facebook**. Users can only access your account when signed in with one of the selected methods. At least one method must stay selected. New accounts allow all four methods until you restrict them.
  </Accordion>

  <Accordion title="Security restrictions bypass">
    Allow Email & Password sign-in for users who hold the **Account settings > Security > Manage** permission, even when Email & Password is not a selected sign-in method. This acts as an escape hatch: a user with that permission can still sign in and fix the configuration if an identity provider is misconfigured.
  </Accordion>
</AccordionGroup>

## Related Concepts

<CardGroup cols={2}>
  <Card title="Users & Roles" icon="users" href="/docs/settings/users-roles">
    Team members, system roles, and custom roles.
  </Card>

  <Card title="Profile" icon="user" href="/docs/settings/profile">
    Your personal details and interface language.
  </Card>
</CardGroup>

## Visibility and Permissions

Access to this view is controlled by your <Tooltip tip={userRoleDefinition}>user role</Tooltip>. The Security page is visible to every role; saving changes requires manage access to general account settings.

<Tabs>
  <Tab title="Visibility" icon="eye">
    | Feature       | Admin | Manager | Member |
    | ------------- | :---: | :-----: | :----: |
    | View settings |   ✓   |    ✓    |    ✓   |
    | Edit settings |   ✓   |    ✗    |    ✗   |
  </Tab>
</Tabs>