# Correct use of roles to see all User's emails?

**URL:** <https://community.parseplatform.org/t/correct-use-of-roles-to-see-all-users-emails/1614>\
**Category:** JavaScript SDK\
**Tags:** security\
**Created:** [April 27, 2021, 7:33am UTC](https://community.parseplatform.org/t/correct-use-of-roles-to-see-all-users-emails/1614 "2021-04-27T07:33:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![samjarman](https://community.parseplatform.org/user_avatar/community.parseplatform.org/samjarman/32/358_2.png) [@samjarman](https://community.parseplatform.org/u/samjarman)\
**Post date:** [April 27, 2021, 7:33am UTC](https://community.parseplatform.org/t/correct-use-of-roles-to-see-all-users-emails/1614/1 "2021-04-27T07:33:12Z")

</div>

Hi there!

We’re building an admin dashboard for one of our apps. We’d like to export a CSV of all users, and that involves getting all users and having their emails present.

By default they’re not - fair enough.

However, we’re trying to use roles and CLPs/ACLs to expose this to a logged in Parse user with an “admin” role. However, nothing we’re trying is working.

We have

- A role with two users in it, deemed to be admin
- a CLP on User, giving full read/write to that role
- (as a test) some ACLs on some users giving the role full read/write

What we get:

- All users are loaded, but only email for the logged in user (passing in session token on the query.find())

So: Is this possible with ACLs/CLPs? Seems not so far.  
What other options do I have? If I have to use master key, then I guess I could put some code in the cloud to work around this.

Thanks!  
Sam

---

<div class="post-metadata">

**Author:** ![davimacedo](https://community.parseplatform.org/user_avatar/community.parseplatform.org/davimacedo/32/316_2.png) [@davimacedo](https://community.parseplatform.org/u/davimacedo)\
**Post date:** [April 27, 2021, 5:27pm UTC](https://community.parseplatform.org/t/correct-use-of-roles-to-see-all-users-emails/1614/2 "2021-04-27T17:27:00Z")

</div>

Yes. I think you will have to use master key via cloud code to retrieve the e-mails.
