diff --git a/src/Controller/UserController.php b/src/Controller/UserController.php
index f9a866c..5db81f3 100644
--- a/src/Controller/UserController.php
+++ b/src/Controller/UserController.php
@@ -106,6 +106,7 @@ class UserController extends AbstractController
     #[Route('/new', name: 'new', methods: ['GET', 'POST'])]
     public function new(Request $request): Response
     {
+        $this->denyAccessUnlessGranted("ROLE_ADMIN");
         $form = $this->createForm(UserForm::class);
         $organizationId = $request->query->get('organizationId');