# User with permission to create collection returns forbidden **URL:** \ **Category:** Help\ **Tags:** permissions, collections\ **Created:** [April 22, 2025, 9:53am UTC](https://community.directus.com/t/user-with-permission-to-create-collection-returns-forbidden/117 "2025-04-22T09:53:53Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Beth](https://sea2.discourse-cdn.com/flex002/user_avatar/community.directus.com/beth/32/30_2.png) [@Beth](https://community.directus.com/u/Beth)\ **Post date:** [April 22, 2025, 9:53am UTC](https://community.directus.com/t/user-with-permission-to-create-collection-returns-forbidden/117/1 "2025-04-22T09:53:53Z")
I have given a users role/policy permission to create a collection but it still returns forbidden when they attempt to do so, any ideas on this? ---
**Author:** ![comfortablycoding](https://sea2.discourse-cdn.com/flex002/user_avatar/community.directus.com/comfortablycoding/32/37_2.png) [@comfortablycoding](https://community.directus.com/u/comfortablycoding)\ **Post date:** [May 12, 2025, 5:20pm UTC](https://community.directus.com/t/user-with-permission-to-create-collection-returns-forbidden/117/3 "2025-05-12T17:20:44Z")
Creating collections are restricted to admins only, irrespective of permissions granted to the user. ---
**Author:** ![carmenh](https://sea2.discourse-cdn.com/flex002/user_avatar/community.directus.com/carmenh/32/55_2.png) [@carmenh](https://community.directus.com/u/carmenh)\ **Post date:** [May 12, 2025, 12:49pm UTC](https://community.directus.com/t/user-with-permission-to-create-collection-returns-forbidden/117/2 "2025-05-12T12:49:16Z")
Hello! Do you know if your user is trying to achieve this via the API? [If so, it would be good to make sure that they’re using the correct authentication method to do so](https://directus.io/docs/guides/auth/email-login).