'IIS Authorization Rules multiple Groups levels web.config

I am currently using the following in my IIS 10 web.config to limit access to my website. We have planed to add another group here to give access to some parts of the website to other users.

My questions is what is best approach here?

<security>
     <authorization>
        <remove users="*" roles="" verbs="" />
        <add accessType="Allow" users="" roles="WebSuperUsers" />
     </authorization>
  </security>

New group needs to have access to index file in root and some other pages located under different folders.

iis iis-10

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution	Source

'IIS Authorization Rules multiple Groups levels web.config

Sources

Related Questions