diff --git a/Server/Controllers/ConfigurationController.cs b/Server/Controllers/ConfigurationController.cs
index 93a3e7a..26f154a 100644
--- a/Server/Controllers/ConfigurationController.cs
+++ b/Server/Controllers/ConfigurationController.cs
@@ -1,3 +1,4 @@
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using ShiftScheduler.Services;
 using ShiftScheduler.Shared;
@@ -7,6 +8,7 @@ namespace ShiftScheduler.Server.Controllers
 {
     [ApiController]
     [Route("api/[controller]")]
+    [Authorize(Policy = "AllowedEmails")]
     public class ConfigurationController : ControllerBase
     {
         private readonly IConfigurationService _configurationService;