# User Types

The platform distinguishes between two types of users: **employees** and **app users**.

## Employees

Employees are the people who work with you on the project. They log into the **backoffice** to configure applications, manage data, set up workflows, and administer the platform.

Employees are managed under **Settings → Team Members** in the backoffice. You invite them by email and assign them roles.

## App Users

App users are the people who use the applications you build — your customers, clients, or end users. They register and log into your **applications** (not the backoffice).

App users are separate from employees. An employee can also have an app user account, but the two accounts are distinct.

App users are visible under **Users → App Users** in the backoffice.

## Controlling access per application

Each application can restrict which user groups are allowed to access it. You configure this under **Application → Settings → User Groups**.

For example:
- A customer-facing CRM application might allow all registered app users
- An internal reporting application might be restricted to employees only
- A beta application might be limited to a specific user group

## Registration control

By default, new app users can self-register in your applications. If you want to limit this — for invite-only access, closed betas, or capacity control — you can disable registration.

→ See [Registration Control](/applications/registration-control)

## Opt-ins and consent

You can require app users to accept terms of service, privacy policies, or other consent items before completing registration or accessing the application.

→ See [Opt-ins & Consent](/applications/opt-ins)