<?xml version="1.0" encoding="utf-8"?> <configuration> <system.web> <authorization> <allow roles="BerpAdministrators, BerpCoordinators, DataEntry, DataAdmin, SystemsAdmin" /> <deny users="*" /> </authorization> </system.web> </configuration>