Skip to content

Getting Started · Using Insites

Set up member profiles

Last updated 4 November 2026

Give your site users a profile and keep a page for signed-in people.

Administrators sign in to the admin; the people who sign in to your public site are contacts in your CRM. A profile is a set of fields you define once and reuse for every contact of one type, for example Member, with a membership number and a renewal date. This guide creates a profile, gives it to a contact, and then keeps a page for signed-in people only. You need to be an administrator of the instance.

Note

A profile holds data. It does not grant access on its own. Access to a page is decided by an authorization policy, which the last section sets up.

Create the profile

  1. In the admin, go to Permissions > Profiles and select Create Profile.
  2. On the Details tab, enter a Profile Name, for example Member. Insites fills in the profile path and suggests a file path; keep both.
  3. Open the Fields tab and select Add Field. Give each field a Field Name, a Field Type such as String, Integer, Date or Boolean, and a UI Element such as Input, Select or Toggle. Select and Radio elements ask for their options. The type cannot be changed after the field is saved, so choose with care.
  4. Select Save Field for each one, drag them into order, then select Create Profile. A profile needs at least one field.

Give it to a contact

  1. Go to CRM > Contacts and open the contact.
  2. In the Profiles section, select Add profile, pick Member and select Assign Profiles.
  3. On the new profile card, select the edit icon, fill in the fields and Save.

To see everyone with the profile, open it under Permissions > Profiles; its Contacts tab lists them. A profile cannot be deleted while contacts still hold it.

Keep a page for signed-in people

An authorization policy is a short rule that runs before a page: it prints true to let a visitor in or false to turn them away.

  1. Go to API > Authorization Policies and select Create Authorization Policy. Name it Signed-in users only. Redirect To is where a refused visitor is sent, for example your sign-in page.
  2. On the Body tab, enter the rule: print false when nobody is signed in, otherwise true. The full rule is in Restrict a page to signed-in users.
  3. Go to CMS > Pages, open the page, and on its Security tab turn on Apply Auth Policy, pick the policy and Save.

Open the page in a private browser window to check that it turns you away, then sign in to your site and open it again.

Next steps