<system.web>
    <authorization>
        <allow users="Bubbles" />
        <deny roles="Sales, Marketing" />
    </authorization>
</system.web>
