{"section":"announcements","requestedLocale":"en","requestedSlug":"2024-02-26-site-editor-and-media-new-authorization-requirement","locale":"en","slug":"2024-02-26-site-editor-and-media-new-authorization-requirement","path":"docs/en/announcements/2024/february/2024-02-26-site-editor-and-media-new-authorization-requirement.md","branch":"main","content":"As of Monday, March 18th, 2024, all [users](https://developers.vtex.com/docs/guides/api-authentication-using-user-tokens) and [application keys](https://developers.vtex.com/docs/guides/api-authentication-using-application-keys) that need access to [Site Editor](/en/docs/tutorials/site-editor-overview) and [Media](/en/docs/tutorials/media-overview) will be required to have the `CMS GraphQL API` License Manager [resource](/en/docs/tutorials/license-manager-resources) added to their [user roles](/en/docs/tutorials/roles) for content management. \n\n## What has changed?\n\nAs [previously announced for Headless CMS users](/en/announcements/2024-02-02-headless-cms-new-authorization-requirement), users and application keys must have the `CMS GraphQL API` resource associated with their role to manage content.  \n\nNow, we are extending this requirement to Site Editor and Media, which means the `CMS GraphQL API` resource is necessary to manage content using these tools.\n\n## Why did we make this change?\nThis change aims to enhance security and simplify user access to the Site Editor and Media. This means users have a more controlled and secure environment when managing store content. \n\n## What needs to be done?\nEnsure that users are associated with the `CMS GraphQL API` resource within their user roles by either [creating a new role](/en/tutorial/roles--7HKK5Uau2H6wxE1rH5oRbc?&utm_source=autocomplete#creating-a-role) or editing an existing one.\n\n> ⚠️ To manage users and their roles, you need the `Save access profile` resource from the <bold>License Manager</bold> product associated with your user role. For example, the [User Administrator - RESTRICTED](/en/docs/tutorials/predefined-roles#user-administrator-restricted) is a predefined role that has the `Save access profile` resource associated with it."}