How would you implement role-based access in an Angular app?

Angular routing · Experienced

Model answer

Store the user's roles after login (from the server response or token) in an auth service, ideally with a signal. Use a guard with canActivate or canMatch that checks the required roles in route data and redirects when missing. Hide menu items and buttons the user cannot use.

All of this is for user experience only. Every API request must be authorised on the server, because anyone can change front-end code. Handle expiry and refresh: when the server answers 401, send the user to login.

Tips

• Always separate UX checks from real security.

Learn this topic

Angular Tutorial: Beginner to Advanced .

Sign in to add your own answer.

More questions

• How does routing work in Angular?
• What is the difference between routerLink and href?
• How do you read route parameters and query parameters?
• What is lazy loading, and how do you do it with routes?
• What are route guards? Give examples.
• What is a resolver, and when would you use one?