diff --git a/CI/e2e/frontend.config.e2e.json b/CI/e2e/frontend.config.e2e.json
index ff24e8815..098450ba1 100644
--- a/CI/e2e/frontend.config.e2e.json
+++ b/CI/e2e/frontend.config.e2e.json
@@ -733,11 +733,103 @@
   "timezone": "UTC",
   "datasetDetailComponent": {
     "enableCustomizedComponent": false,
+    "tileRestrictedIconVisible": true,
+    "tileRestrictedIconGroups": [
+      "admin"
+    ],
     "customization": [
+      {
+        "type": "regular",
+        "label": "Admin Only Section",
+        "order": 1,
+        "row": 1,
+        "col": 10,
+        "visible": true,
+        "authorization": [
+          "admin"
+        ],
+        "fields": [
+          {
+            "element": "text",
+            "source": "datasetName",
+            "order": 0
+          },
+          {
+            "element": "copy",
+            "source": "description",
+            "order": 1
+          }
+        ]
+      },
+      {
+        "type": "regular",
+        "label": "Public Section",
+        "order": 2,
+        "row": 1,
+        "col": 10,
+        "visible": true,
+        "authorization": [],
+        "fields": [
+          {
+            "element": "text",
+            "source": "ownerEmail",
+            "order": 0
+          },
+          {
+            "element": "tag",
+            "source": "keywords",
+            "order": 1
+          }
+        ]
+      },
+      {
+        "type": "regular",
+        "label": "Archive Manager Section",
+        "order": 3,
+        "row": 1,
+        "col": 10,
+        "visible": true,
+        "authorization": [
+          "archivemanager"
+        ],
+        "fields": [
+          {
+            "element": "text",
+            "source": "type",
+            "order": 0
+          },
+          {
+            "element": "date",
+            "source": "creationTime",
+            "order": 1
+          }
+        ]
+      },
+      {
+        "type": "regular",
+        "label": "Invisible Section",
+        "order": 4,
+        "row": 1,
+        "col": 10,
+        "visible": false,
+        "authorization": [],
+        "fields": [
+          {
+            "element": "text",
+            "source": "type",
+            "order": 0
+          },
+          {
+            "element": "date",
+            "source": "creationTime",
+            "order": 1
+          }
+        ]
+      },
       {
         "type": "regular",
         "label": "General Information",
-        "order": 0,
+        "order": 5,
         "row": 1,
         "col": 8,
         "fields": [
@@ -776,7 +868,7 @@
       {
         "type": "attachments",
         "label": "Gallery",
-        "order": 1,
+        "order": 6,
         "col": 2,
         "row": 2,
         "options": {
@@ -787,7 +879,7 @@
       {
         "type": "regular",
         "label": "Contact Information",
-        "order": 2,
+        "order": 7,
         "col": 2,
         "row": 1,
         "fields": [
@@ -806,7 +898,7 @@
       {
         "type": "regular",
         "label": "Files Information",
-        "order": 3,
+        "order": 8,
         "col": 2,
         "row": 1,
         "fields": [
@@ -845,7 +937,7 @@
       {
         "type": "regular",
         "label": "Related Documents",
-        "order": 4,
+        "order": 9,
         "col": 4,
         "row": 1,
         "fields": [
@@ -879,7 +971,7 @@
       {
         "type": "attachments",
         "label": "Gallery",
-        "order": 5,
+        "order": 10,
         "col": 1,
         "row": 1,
         "options": {
@@ -891,7 +983,7 @@
         "type": "scientificMetadata",
         "label": "Scientific Metadata Table",
         "viewMode": "table",
-        "order": 6,
+        "order": 11,
         "col": 9,
         "row": 1
       },
@@ -899,18 +991,18 @@
         "type": "scientificMetadata",
         "label": "Scientific Metadata JSON",
         "viewMode": "json",
-        "order": 6
+        "order": 12
       },
       {
         "type": "scientificMetadata",
         "label": "Scientific Metadata Tree",
         "viewMode": "tree",
-        "order": 6
+        "order": 13
       },
       {
         "type": "datasetJsonView",
         "label": "Dataset Json View",
-        "order": 7,
+        "order": 14,
         "col": 10,
         "row": 2
       }
diff --git a/CI/e2e/frontend.theme.e2e.json b/CI/e2e/frontend.theme.e2e.json
index cdc519c89..f0ecfde13 100644
--- a/CI/e2e/frontend.theme.e2e.json
+++ b/CI/e2e/frontend.theme.e2e.json
@@ -49,6 +49,12 @@
     "--theme-header-4-lighter-contrast": "#000000",
     "--theme-header-4-darker": "#9b429b",
     "--theme-header-4-darker-contrast": "#ffffff",
+    "--theme-header-5-default": "#7f7f7f",
+    "--theme-header-5-default-contrast": "#ffffff",
+    "--theme-header-5-lighter": "#e5e5e5",
+    "--theme-header-5-lighter-contrast": "#000000",
+    "--theme-header-5-darker": "#4c4c4c",
+    "--theme-header-5-darker-contrast": "#ffffff",
     "--theme-hover-default": "#7f7f7f",
     "--theme-hover-default-contrast": "#000000",
     "--theme-hover-lighter": "#e5e5e5",
diff --git a/cypress/e2e/datasets/datasets-detail-dynamic-tile-authorization.cy.js b/cypress/e2e/datasets/datasets-detail-dynamic-tile-authorization.cy.js
new file mode 100644
index 000000000..c8de9d477
--- /dev/null
+++ b/cypress/e2e/datasets/datasets-detail-dynamic-tile-authorization.cy.js
@@ -0,0 +1,480 @@
+import { testConfig } from "../../fixtures/testData";
+import { mergeConfig } from "../../support/utils";
+
+describe("1010: Dataset Detail Dynamic Tile Authorization", () => {
+  const baseCustomization = [
+    {
+      type: "regular",
+      label: "Admin Only Section",
+      order: 1,
+      row: 1,
+      col: 10,
+      visibile: true,
+      authorization: ["admin"],
+      fields: [
+        { element: "text", source: "datasetName", order: 0 },
+        { element: "copy", source: "description", order: 1 },
+      ],
+    },
+    {
+      type: "regular",
+      label: "Public Section",
+      order: 2,
+      row: 1,
+      col: 10,
+      fields: [
+        { element: "text", source: "ownerEmail", order: 0 },
+        { element: "tag", source: "keywords", order: 1 },
+      ],
+    },
+    {
+      type: "regular",
+      label: "Archive Manager Section",
+      order: 3,
+      row: 1,
+      col: 10,
+      visible: true,
+      authorization: ["archivemanager"],
+      fields: [
+        { element: "text", source: "type", order: 0 },
+        { element: "date", source: "creationTime", order: 1 },
+      ],
+    },
+    {
+      type: "regular",
+      label: "Invisible Section",
+      order: 4,
+      row: 1,
+      col: 10,
+      visible: false,
+      authorization: [],
+      fields: [
+        { element: "text", source: "type", order: 0 },
+        { element: "date", source: "creationTime", order: 1 },
+      ],
+    },
+  ];
+
+  const authTestConfigNoIndicator = {
+    datasetDetailComponent: {
+      enableCustomizedComponent: true,
+      tileRestrictedIconVisible: false,
+      tileRestrictedIconGroups: [],
+      customization: baseCustomization,
+    },
+  };
+
+  const authTestConfigWithIndicator = {
+    datasetDetailComponent: {
+      enableCustomizedComponent: true,
+      tileRestrictedIconVisible: true,
+      tileRestrictedIconGroups: ["admin"],
+      customization: baseCustomization,
+    },
+  };
+
+  const adminUsername = Cypress.env("username");
+  const adminPassword = Cypress.env("password");
+  const archiveManagerUsername = Cypress.env("secondaryUsername");
+  const archiveManagerPassword = Cypress.env("secondaryPassword");
+  const guestUsername = Cypress.env("guestUsername");
+  const guestPassword = Cypress.env("guestPassword");
+
+
+  describe("1010:0010: No restricted access indicator", () => {
+
+    beforeEach(() => {
+      cy.readFile("CI/e2e/frontend.config.e2e.json").then((baseConfig) => {
+        baseConfig.datasetDetailComponent.customization = [];
+        const mergedConfig = mergeConfig(baseConfig, authTestConfigNoIndicator);
+        cy.intercept("GET", "**/admin/config", mergedConfig).as(
+          "getFrontendConfigNoIndicator",
+        );
+      });
+
+      cy.login(adminUsername, adminPassword);
+      cy.createDataset({ type: "raw" });
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigNoIndicator");
+    });
+
+    after(() => {
+      cy.removeDatasets();
+    });
+
+    it("1010:0010:0010: should show all tiles to admin user", () => {
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Admin user should see all sections
+      cy.get('[data-cy="section-label"]').should("contain", "Admin Only Section");
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      // But NOT archive manager only section
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to admin
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+
+      // Admin only section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+      // Public section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+
+    });
+
+    it("1010:0010:0020: should hide admin-only tile from archiveManager user", () => {
+      cy.login(archiveManagerUsername, archiveManagerPassword);
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigNoIndicator");
+
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Archive Manager should see public and archiveManager sections
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      cy.get('[data-cy="section-label"]').should("contain", "Archive Manager Section");
+      // But NOT admin-only section
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to archiveManager
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+
+      // Archive Manager only section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+      // Public section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+
+    });
+
+    it("1010:0010:0030: should only show public tile to guest user", () => {
+      cy.login(guestUsername, guestPassword);
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigNoIndicator");
+
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Guest user (user1) should only see public section
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      // Should NOT see admin-only or archiveManager sections
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")').should(
+        "not.exist",
+      );
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to guest
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+
+      // Public section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+    });
+
+    it("1010:0010:0040: should only show public tile to non authenticated user", () => {
+
+      cy.createDataset({type: "raw", "isPublished": true});
+
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigNoIndicator");
+
+      cy.get(".user-button").should("contain.text", adminUsername).click();
+      cy.get("[data-cy=logout-button]").click();
+      cy.finishedLoading();
+
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigNoIndicator");
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Non authenticated user should only see public section
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      // Should NOT see admin-only or archiveManager sections
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")').should(
+        "not.exist",
+      );
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to non authenticated user
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+      // Public section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+    });
+  })
+
+  describe("1010:0020: Show restricted access indicator", () => {
+
+    beforeEach(() => {
+      cy.readFile("CI/e2e/frontend.config.e2e.json").then((baseConfig) => {
+        const mergedConfig = mergeConfig(baseConfig, authTestConfigWithIndicator);
+        cy.intercept("GET", "**/admin/config", mergedConfig).as(
+          "getFrontendConfigWithIndicator",
+        );
+      });
+
+      cy.login(adminUsername, adminPassword);
+      cy.createDataset({ type: "raw" });
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigWithIndicator");
+    });
+
+    after(() => {
+      cy.removeDatasets();
+    });
+
+    it("1010:0020:0010: should show all tiles to admin user", () => {
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Admin user should see all sections
+      cy.get('[data-cy="section-label"]').should("contain", "Admin Only Section");
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      // But NOT archive manager only section
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to non authenticated user
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+
+      // Lock icons should appear on restricted tiles
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator mat-icon").should("exist").and("contain", "lock_outline");
+        });
+      // Public section with ["#all"] should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+
+      // Admin user should see Admin Only Section with tooltip showing "admin"
+      // cy.get('[data-cy="section-label"]:contains("Admin Only Section")')
+      //   .parent()
+      //   .within(() => {
+      //     cy.get('mat-icon.mat-mdc-tooltip-trigger', { timeout: 20000 })
+      //       .should("be.visible")
+      //       .then(($tooltip) => {
+      //         cy.log('Tooltip HTML:', $tooltip);
+      //       })
+      //     //  .and("have.attr", "aria-label", "admin");
+      //     // cy.get('mat-icon.mat-mdc-tooltip-trigger')
+      //     //   .should("exist")
+      //     //   .and('have.attr', 'ng-reflect-message');
+      //   });
+
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")')
+        .parent()
+        .find("mat-icon.mat-mdc-tooltip-trigger")
+        .trigger("mouseenter");
+
+      // The tooltip renders in the CDK overlay at the end of body, so it can't be
+      // found inside the trigger's parent.
+      cy.get(".mat-mdc-tooltip").should("be.visible").and("contain.text", "admin");
+
+    });
+
+    it("1010:0020:0020: should hide admin-only tile from archiveManager user", () => {
+      cy.login(archiveManagerUsername, archiveManagerPassword);
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigWithIndicator");
+
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Archive Manager should see public and archiveManager sections
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      cy.get('[data-cy="section-label"]').should("contain", "Archive Manager Section");
+      // But NOT admin-only section
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to non authenticated user
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+
+      // Archive Manager Section should not have lock icon as it is not in the groups with access to this info
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+      // Public section should NOT have lock icon
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+    });
+
+    it("1010:0020:0030: should only show public tile to guest user", () => {
+      cy.login(guestUsername, guestPassword);
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigWithIndicator");
+
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Guest user (user1) should only see public section
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      // Should NOT see admin-only or archiveManager sections
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")').should(
+        "not.exist",
+      );
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to non authenticated user
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+
+      // Public section should NOT have lock icon (has no authorization = public)
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+    });
+
+    it("1010:0020:0040: should only show public tile to non authenticated user", () => {
+      cy.createDataset({type: "raw", "isPublished": true});
+
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigWithIndicator");
+
+      cy.get(".user-button").should("contain.text", adminUsername).click();
+      cy.get("[data-cy=logout-button]").click();
+      cy.finishedLoading();
+
+      cy.visit("/datasets");
+      cy.wait("@getFrontendConfigWithIndicator");
+
+      cy.finishedLoading();
+
+      cy.get('[data-cy="text-search"]').clear().type("Cypress");
+      cy.get('[data-cy="search-button"]').click();
+
+      cy.isLoading();
+
+      cy.get("mat-row").contains("Cypress Dataset").click();
+
+      cy.isLoading();
+
+      // Non authenticated user should only see public section
+      cy.get('[data-cy="section-label"]').should("contain", "Public Section");
+      // Should NOT see admin-only or archiveManager sections
+      cy.get('[data-cy="section-label"]:contains("Admin Only Section")').should(
+        "not.exist",
+      );
+      cy.get('[data-cy="section-label"]:contains("Archive Manager Section")').should(
+        "not.exist",
+      );
+      // Invisible Section should not be visible to non authenticated user
+      cy.get('[data-cy="section-label"]:contains("Invisible Section")').should(
+        "not.exist",
+      );
+      // Public section should NOT have lock icon (has no authorization = public)
+      cy.get('[data-cy="section-label"]:contains("Public Section")')
+        .parent()
+        .within(() => {
+          cy.get(".restricted-indicator").should("not.exist");
+        });
+    });
+
+  })
+});
diff --git a/cypress/e2e/datasets/datasets-detail-dynamic.cy.js b/cypress/e2e/datasets/datasets-detail-dynamic.cy.js
index 3e186e622..facd3b29e 100644
--- a/cypress/e2e/datasets/datasets-detail-dynamic.cy.js
+++ b/cypress/e2e/datasets/datasets-detail-dynamic.cy.js
@@ -1,14 +1,15 @@
 import { testConfig } from "../../fixtures/testData";
 import { mergeConfig } from "../../support/utils";
 
-describe("Datasets Detail View Dynamic", () => {
-  const dynamicComponentConfig = testConfig.dynamicDetialViewComponent;
+describe("0050: Datasets Detail View Dynamic", () => {
+  const dynamicComponentConfig = testConfig.dynamicDetailViewComponent;
   const customizedLabelSets = dynamicComponentConfig.labelsLocalization.dataset;
   const customizedComponents =
     dynamicComponentConfig.datasetDetailComponent.customization;
 
   beforeEach(() => {
     cy.readFile("CI/e2e/frontend.config.e2e.json").then((baseConfig) => {
+      baseConfig.datasetDetailComponent.customization = [];
       const mergedConfig = mergeConfig(baseConfig, dynamicComponentConfig);
       cy.intercept("GET", "**/admin/config", mergedConfig).as(
         "getFrontendConfig",
@@ -25,7 +26,7 @@ describe("Datasets Detail View Dynamic", () => {
     cy.removeDatasets();
   });
 
-  it("should load datasets with customized labels", () => {
+  it("0010: should load datasets with customized labels", () => {
     cy.get(".dataset-table mat-table mat-header-row").should("exist");
 
     cy.finishedLoading();
@@ -45,7 +46,7 @@ describe("Datasets Detail View Dynamic", () => {
     });
   });
 
-  it("should order sections based on customized settings", () => {
+  it("0020: should order sections based on customized settings", () => {
     cy.get(".dataset-table mat-table mat-header-row").should("exist");
 
     cy.finishedLoading();
@@ -69,7 +70,7 @@ describe("Datasets Detail View Dynamic", () => {
     });
   });
 
-  it("should order fields based on customized settings", () => {
+  it("0030: should order fields based on customized settings", () => {
     cy.get(".dataset-table mat-table mat-header-row").should("exist");
 
     cy.finishedLoading();
@@ -97,7 +98,7 @@ describe("Datasets Detail View Dynamic", () => {
       });
   });
 
-  it("should render attachments section with customized settings", () => {
+  it("0040: should render attachments section with customized settings", () => {
     cy.get(".dataset-table mat-table mat-header-row").should("exist");
 
     cy.finishedLoading();
@@ -128,15 +129,24 @@ describe("Datasets Detail View Dynamic", () => {
 
     cy.get('[data-cy="section-label"]')
       .contains(customizedLabelSets["Section Label Attachments"])
-      .parent()
-      .find("img")
+      .closest('mat-card')
+      .find('mat-card-content [data-cy="attachment-thumbnail"]')
       .should("have.length", expectedImageCount)
       .each(($img) => {
         cy.wrap($img).should("have.attr", "class").and("contain", expectedSize);
       });
   });
 
-  it("should render tabs correctly on reload", () => {
+  it("0050: should render tabs correctly on reload", () => {
+    cy.get(".dataset-table mat-table mat-header-row").should("exist");
+
+    cy.finishedLoading();
+
+    cy.get('[data-cy="text-search"]').clear().type("Cypress");
+    cy.get('[data-cy="search-button"]').click();
+
+    cy.isLoading();
+
     cy.get("mat-row").contains("Cypress Dataset").click();
 
     cy.reload();
diff --git a/cypress/e2e/datasets/datasets-metadata.cy.js b/cypress/e2e/datasets/datasets-metadata.cy.js
index 7b7356a3c..b2d1ac388 100644
--- a/cypress/e2e/datasets/datasets-metadata.cy.js
+++ b/cypress/e2e/datasets/datasets-metadata.cy.js
@@ -77,14 +77,14 @@ describe("Datasets", () => {
         cy.finishedLoading();
 
         cy.get("mat-select[data-cy=field-type-input]")
-          .first()
+          .last()
           .should("contain.text", "string");
         cy.get(
           "[data-cy=metadata-edit-form] [data-cy=metadata-name-input]",
-        ).should("have.value", metadataName);
+        ).last().should("have.value", metadataName);
         cy.get(
           "[data-cy=metadata-edit-form] [data-cy=metadata-value-input]",
-        ).should("have.value", metadataValue);
+        ).last().should("have.value", metadataValue);
       });
     });
 
@@ -813,7 +813,7 @@ describe("Datasets", () => {
         .then((option) => {
           option[0].click();
         });
-      
+
       cy.get("[data-cy=metadata-name-input]")
         .last()
         .focus()
@@ -886,7 +886,7 @@ describe("Datasets", () => {
         .then((option) => {
           option[0].click();
         });
-      
+
       cy.get("[data-cy=metadata-name-input]")
         .last()
         .focus()
@@ -896,17 +896,17 @@ describe("Datasets", () => {
         .last()
         .focus()
         .type(`${metadata.human_name}{enter}`);
-      
+
       cy.get("[data-cy=metadata-value-input]")
         .last()
         .focus()
         .type(`${metadata.value}{enter}`);
-      
+
       cy.get("[data-cy=metadata-unit-input]")
         .last()
         .focus()
         .type(`${metadata.unit}{enter}`);
-      
+
       cy.get("button[data-cy=save-changes-button]").click();
 
       cy.finishedLoading();
@@ -972,12 +972,12 @@ describe("Datasets", () => {
         .last()
         .focus()
         .type(`${metadata.human_name}{enter}`);
-      
+
       cy.get("[data-cy=metadata-value-input]")
         .last()
         .focus()
         .type(`${metadata.value}{enter}`);
-      
+
       cy.get("button[data-cy=save-changes-button]").click();
 
       cy.finishedLoading();
diff --git a/cypress/fixtures/testData.js b/cypress/fixtures/testData.js
index 2f76448dd..725f8b20a 100644
--- a/cypress/fixtures/testData.js
+++ b/cypress/fixtures/testData.js
@@ -93,7 +93,20 @@ export const testData = {
     endTime: "2019-10-31T14:44:46.143Z",
     creationLocation: "Cypress",
     dataFormat: "Nexus Version x.y",
-    scientificMetadata: {},
+    scientificMetadata: {
+      key_1:{
+        human_name: "Key 1",
+        value: "Value 1",
+        unit: ""
+      },
+      key_2: {
+        human_name: "Key 2",
+        value: 1,
+        unit: "mm",
+        valueSI: 0.01,
+        unitSI: "m"
+      }
+    },
     owner: "string",
     ownerEmail: "string@test.com",
     orcidOfOwner: "string",
@@ -180,10 +193,11 @@ export const testData = {
     type: "ui_test",
     jobParams: {},
   },
+  testImage: "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAFUlEQVR42mNkYPhfz0AEYBxVSF+FAP5FDvcfRYWgAAAAAElFTkSuQmCC",
 };
 
 export const testConfig = {
-  dynamicDetialViewComponent: {
+  dynamicDetailViewComponent: {
     labelsLocalization: {
       dataset: {
         datasetName: "Test String",
@@ -425,3 +439,4 @@ export const personalizedDatasetsColumnsList = [
   "Start Time",
   "End Time",
 ];
+
diff --git a/cypress/support/commands.js b/cypress/support/commands.js
index eb525934f..bbafbecff 100644
--- a/cypress/support/commands.js
+++ b/cypress/support/commands.js
@@ -486,15 +486,15 @@ Cypress.Commands.add("uploadDatasetAttachments", (number = 1, wait = 500) => {
   cy.get(".mat-mdc-tab-link").contains("Attachments").click();
 
   for (let i = 0; i < number; i++) {
-    const randomContent = `data:image/png;base64,${Cypress._.times(100, () =>
-      Math.floor(Math.random()).toString(16),
-    ).join("")}`;
+    // const randomContent = `data:image/png;base64,${Cypress._.times(100, () =>
+    //   Math.floor(Math.random()).toString(16),
+    // ).join("")}`;
 
     const fileName = `random-image-${Date.now()}-${i}.png`;
 
     cy.get(".dropzone").selectFile(
       {
-        contents: Cypress.Buffer.from(randomContent, "base64"),
+        contents: Cypress.Buffer.from(testData.testImage, "base64"),
         fileName: fileName,
         mimeType: "image/png",
       },
@@ -507,6 +507,7 @@ Cypress.Commands.add("uploadDatasetAttachments", (number = 1, wait = 500) => {
   }
 });
 
+
 Cypress.Commands.add("removeDatasetsForElasticSearch", (datasetName) => {
   cy.login(Cypress.env("username"), Cypress.env("password"));
   cy.getToken().then((token) => {
diff --git a/docs/dataset-detail-tile-authorization.md b/docs/dataset-detail-tile-authorization.md
new file mode 100644
index 000000000..a531a8619
--- /dev/null
+++ b/docs/dataset-detail-tile-authorization.md
@@ -0,0 +1,905 @@
+# Dataset Detail Tile Authorization
+
+## Table of Contents
+
+1. [Overview](#1-overview)
+   - [Restricted Tiles Indicator](#restricted-tiles-indicator)
+2. [Configuration Options](#2-configuration-options)
+3. [Admin Dashboard Settings](#3-admin-dashboard-settings)
+4. [JSON Form Schema](#4-json-form-schema)
+5. [Usage Examples](#5-usage-examples)
+6. [Authorization Rules](#6-authorization-rules)
+7. [Troubleshooting](#7-troubleshooting)
+8. [FAQ](#8-faq)
+
+---
+
+## 1. Overview
+
+### What is Dataset Detail Tile Authorization?
+
+The Dataset Detail Tile Authorization feature allows administrators to control which user groups can view specific sections (tiles) within the dataset detail page. 
+This enables fine-grained UI customization on how to present the  dataset information, ensuring  a better UX.
+
+### Target Audience
+
+- **Administrators**: Configure tile-level authorization through the Admin Dashboard
+- **Developers**: Understand the schema and integration points
+- **End Users**: View only the tiles they have permission to see
+
+### Purpose
+
+Dataset Detail Tile Authorization serves as:
+- Access control mechanism for sensitive dataset metadata
+- Customizable information visibility per user group
+- Compliance with data governance policies
+- Flexible configuration without code changes
+
+### Key Features
+
+- Tile-level authorization for dataset detail components
+- Group-based access control using user's `accessGroups`
+- Empty authorization array means public access (no restriction)
+- Configurable through Admin Dashboard or configuration files
+- Fully backward compatible with existing configurations
+
+### Component Architecture
+
+The authorization system consists of:
+1. **Frontend Configuration**: Defined in `frontend.config.jsonforms.json`
+2. **Admin Dashboard**: Visual configuration interface at `/admin/config-edit`
+3. **Runtime Configuration**: Loaded from backend endpoint `/api/v3/runtime-config/frontendConfig` or local `config.json`
+4. **Dataset Detail Component**: Renders tiles based on user authorization
+
+### Restricted Tiles Indicator
+
+**How It Works:**
+
+The dataset detail component can optionally display a visual indicator (lock icon) on tiles that have restricted access. This feature is controlled by the `tileRestrictedIconVisible` configuration flag.
+
+- When **enabled** (`true`), a lock icon (`lock_outline`) appears in the header of any tile that has restricted access
+- When **disabled** (`false` or undefined), no lock icons are displayed
+- A tile is considered "restricted" if it has a non-empty `authorization` array defined
+- The lock icon includes a tooltip listing the groups authorized to view the tile
+
+**Runtime Property:**
+
+Each section in the filtered `datasetView$` observable now includes a computed `restrictedIconVisible` property. This property is dynamically calculated at runtime based on:
+- The `tileRestrictedIconVisible` configuration flag
+- The `tileRestrictedIconGroups` configuration (which user groups can see the icon)
+- The section's `authorization` array
+- The current user's groups
+
+The `restrictedIconVisible` property is **not** a configuration option; it is computed and assigned to each section during the filtering process in `dataset-detail-dynamic.component.ts`.
+
+**Configuration:**
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "tileRestrictedIconVisible": true,
+    "tileRestrictedIconGroups": ["admin", "scientists"],
+    "customization": [...]
+  }
+}
+```
+
+**Behavior:**
+- Tiles with no `authorization` keys or empty array `[]` → No lock icon (visible to all)
+- Tiles with `authorization: ["group1", "group2"]` → Lock icon displayed (restricted)
+- To hide a tile, set `visible: false`
+
+**Files Involved:**
+- `src/app/state-management/models/index.ts` - Configuration interface (includes `DatasetDetailComponentConfig` with `tileRestrictedIconVisible` and `tileRestrictedIconGroups`)
+- `src/app/datasets/dataset-detail-dynamic/dataset-detail-dynamic.component.ts` - Logic (computes `restrictedIconVisible` at runtime)
+- `src/app/datasets/dataset-detail-dynamic/dataset-detail-dynamic.component.html` - Template
+- `src/app/datasets/dataset-detail-dynamic/dataset-detail-dynamic.component.scss` - Styling
+- `src/app/admin/schema/frontend.config.jsonforms.json` - Admin UI schema
+- `src/app/app-config.service.ts` - Configuration service
+
+---
+
+## 2. Configuration Options
+
+### Configuration Structure
+
+The authorization can be configured at **two levels**:
+
+#### Level 1: Global Dataset Detail Component Authorization (NEW)
+
+Added to `datasetDetailComponent` object itself:
+
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "authorization": ["admin", "scientists"],
+    "customization": [...]
+  }
+}
+```
+
+When set at this level, **all tiles** within the dataset detail component require the specified authorization to be visible.
+
+#### Level 2: Individual Tile Authorization
+
+Configured on each customization item within the `customization` array:
+
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "customization": [
+      {
+        "type": "regular",
+        "label": "General Information",
+        "order": 1,
+        "row": 1,
+        "col": 10,
+        "authorization": [],
+        "fields": [...]
+      },
+      {
+        "type": "scientificMetadata",
+        "label": "Scientific Metadata",
+        "order": 2,
+        "row": 2,
+        "col": 10,
+        "authorization": ["scientists", "admin"],
+        "source": "scientificMetadata"
+      }
+    ]
+  }
+}
+```
+
+### Configuration Keys
+
+| Key | Type | Required | Default | Description |
+|-----|------|----------|---------|-------------|
+| `datasetDetailComponent.authorization` | string[] | No | `null` | Global authorization for all tiles in the component |
+| `datasetDetailComponent.customization[].authorization` | string[] | No | `[]` | Tile-specific authorization (empty array means no restriction) |
+| `datasetDetailComponent.customization[].visible` | boolean | No | `true` | Controls whether the tile is visible (use `false` to hide) |
+| `datasetDetailComponent.tileRestrictedIconVisible` | boolean | No | `false` | Show lock icon on tiles with restricted access |
+| `datasetDetailComponent.tileRestrictedIconGroups` | string[] | No | `[]` | User groups that can see the restricted icon (empty array means all users) |
+
+### Configuration Locations
+
+#### Backend Configuration (Recommended)
+
+**Endpoint**: `GET /api/v3/runtime-config/frontendConfig`
+
+The backend provides the frontend configuration. This is the primary configuration source in production deployments.
+
+#### Local Configuration Files
+
+**Primary File**: `src/assets/config.json`
+
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "authorization": ["admin"],
+    "customization": [...]
+  }
+}
+```
+
+**Override File**: `src/assets/config.override.json` (requires `allowConfigOverrides: true`)
+
+Used for environment-specific overrides without modifying the main configuration.
+
+### TypeScript Interface
+
+**File**: `src/app/state-management/models/index.ts`
+
+```typescript
+export interface DatasetDetailComponentConfig {
+  enableCustomizedComponent: boolean;
+  customization: CustomizationItem[];
+  authorization?: string[];  // Global authorization for all tiles
+  tileRestrictedIconVisible?: boolean;  // Show lock icon on restricted tiles
+  tileRestrictedIconGroups?: string[];  // User groups that can see the restricted icon
+}
+
+export interface AppConfig {
+  datasetDetailComponent?: DatasetDetailComponentConfig;
+}
+
+export interface CustomizationItem {
+  type: CustomizationType;
+  label: string;
+  order: number;
+  row: number;
+  col: number;
+  fields?: Field[];
+  source?: string;
+  options?: AttachmentOptions;
+  viewMode?: viewModeOptions;
+  authorization?: string[];  // Tile-specific authorization (empty array means no restriction)
+  visible?: boolean;  // Controls visibility (defaults to true)
+  restrictedIconVisible?: boolean;  // Computed at runtime, indicates if lock icon should be shown
+}
+```
+
+### Admin Interface Configuration
+
+**Path**: Admin Dashboard > Frontend Config > Dataset Detail Component section
+
+The admin UI provides form controls through JSONForms:
+- **Enable Customized Component**: Toggle switch for `enableCustomizedComponent`
+- **Show Restricted Tiles Indicator**: Toggle switch for `datasetDetailComponent.tileRestrictedIconVisible`
+- **Restricted Icon Groups**: Array of strings input for `datasetDetailComponent.tileRestrictedIconGroups`
+- **Authorization**: Array of strings input for global tile authorization
+- **Customization**: List with detail view for configuring individual tiles
+
+---
+
+## 3. Admin Dashboard Settings
+
+### Accessing the Configuration
+
+1. Navigate to `/admin` in your SciCat Frontend application
+2. Click on **Frontend Config** or **Configuration Edit**
+3. Scroll to the **Dataset Detail Component** section
+
+### Admin Dashboard Form Structure
+
+The Admin Dashboard uses JSONForms with Angular Material renderers to provide a user-friendly interface for configuration.
+
+#### Dataset Detail Component Section
+
+![Admin Dashboard - Dataset Detail Component Section](images/admin-dashboard-dataset-detail-component.png)
+
+**Form Fields:**
+
+| Field | Type | Description |
+|-------|------|-------------|
+| Enable Customized Component | Toggle | Enables/disables custom tile configuration |
+| Authorization | Array Input | Global authorization groups for all tiles |
+| Customization Configuration | List Editor | Configure individual tiles with their own authorization |
+
+#### Adding Global Authorization
+
+1. In the **Dataset Detail Component** section
+2. Locate the **Authorization** field
+3. Click **Add** or start typing to add group names
+4. Press Enter or comma to add each group
+5. Save the configuration
+
+![Authorization Array Input](images/admin-authorization-array-input.png)
+
+#### Configuring Tile-Specific Authorization
+
+1. In the **Customization Configuration** list
+2. Expand or add a new tile configuration
+3. Locate the **Authorization** field for that tile
+4. Add the desired groups
+5. Save the configuration
+
+![Tile Authorization Configuration](images/admin-tile-authorization.png)
+
+### Available Control Types
+
+The Dataset Detail Component supports the following tile types:
+
+| Type | Description | Authorization Supported |
+|------|-------------|----------------------|
+| `regular` | Custom fields tile | Yes |
+| `scientificMetadata` | Scientific metadata viewer | Yes |
+| `datasetJsonView` | JSON view of dataset | Yes |
+| `attachments` | Attachments section | Yes |
+
+### Admin Dashboard Features
+
+- **Live Preview**: Changes are reflected in the form immediately
+- **JSON Preview**: Click "Json Preview" button to see the raw JSON configuration
+- **Export**: Download the current configuration as a JSON file
+- **Save**: Persist changes to the backend
+
+---
+
+## 4. JSON Form Schema
+
+### Schema Definition
+
+The JSON Form Schema is defined in `src/app/admin/schema/frontend.config.jsonforms.json`
+
+#### Schema Section (datasetDetailComponent)
+
+```json
+"datasetDetailComponent": {
+  "type": "object",
+  "properties": {
+    "enableCustomizedComponent": { "type": "boolean" },
+    "authorization": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "tileRestrictedIconVisible": {
+      "type": "boolean",
+      "title": "Show Restricted Tiles Indicator",
+      "description": "Display a lock icon on tiles with restricted access"
+    },
+    "tileRestrictedIconGroups": {
+      "type": "array",
+      "items": { "type": "string" },
+      "title": "Restricted Icon Groups",
+      "description": "User groups that can see the restricted tile icon"
+    },
+    "customization": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "label": { "type": "string" },
+          "type": {
+            "type": "string",
+            "enum": ["scientificMetadata", "attachments", "datasetJsonView", "regular"]
+          },
+          "order": { "type": "number" },
+          "row": { "type": "number" },
+          "col": { "type": "number" },
+          "viewMode": {
+            "type": "string",
+            "enum": ["table", "json", "tree"]
+          },
+          "options": {
+            "type": "object",
+            "properties": {
+              "limit": { "type": "number" },
+              "size": {
+                "type": "string",
+                "enum": ["small", "medium", "large"]
+              }
+            }
+          },
+          "fields": {
+            "type": "array",
+            "default": [{ "element": "text", "source": "", "order": 0 }],
+            "items": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "type": "string",
+                  "enum": ["text", "copy", "tag", "linky", "date", "internalLink"]
+                },
+                "source": { "type": "string" },
+                "order": { "type": "number" }
+              },
+              "required": ["element", "source", "order"]
+            }
+          },
+          "authorization": {
+            "type": "array",
+            "items": { "type": "string" }
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+#### UI Schema Section (Dataset Detail Component)
+
+```json
+{
+  "type": "Group",
+  "label": "Dataset Detail Component",
+  "options": {
+    "expandable": true
+  },
+  "elements": [
+    {
+      "type": "Control",
+      "scope": "#/properties/datasetDetailComponent/properties/enableCustomizedComponent"
+    },
+    {
+      "type": "Control",
+      "scope": "#/properties/datasetDetailComponent/properties/tileRestrictedIconVisible"
+    },
+    {
+      "type": "Control",
+      "scope": "#/properties/datasetDetailComponent/properties/tileRestrictedIconGroups"
+    },
+    {
+      "type": "Control",
+      "scope": "#/properties/datasetDetailComponent/properties/authorization"
+    },
+    {
+      "type": "ListWithDetail",
+      "label": "Customization Configuration",
+      "scope": "#/properties/datasetDetailComponent/properties/customization",
+      "options": {
+        "detail": {
+          "type": "VerticalLayout",
+          "elements": [
+            {
+              "type": "HorizontalLayout",
+              "elements": [
+                { "type": "Control", "scope": "#/properties/label" },
+                { "type": "Control", "scope": "#/properties/type" },
+                { "type": "Control", "scope": "#/properties/order" },
+                { "type": "Control", "scope": "#/properties/row" },
+                { "type": "Control", "scope": "#/properties/col" },
+                {
+                  "type": "Control",
+                  "scope": "#/properties/viewMode",
+                  "rule": {
+                    "effect": "SHOW",
+                    "condition": {
+                      "scope": "#/properties/type",
+                      "schema": {
+                        "const": "scientificMetadata"
+                      }
+                    }
+                  }
+                }
+              ]
+            },
+            {
+              "type": "VerticalLayout",
+              "label": "Attachments Options",
+              "elements": [...],
+              "rule": { ... }
+            },
+            {
+              "type": "Control",
+              "label": "Fields",
+              "scope": "#/properties/fields",
+              "rule": { ... },
+              "options": { ... }
+            }
+          ]
+        }
+      }
+    }
+  ]
+}
+```
+
+### Custom Renderers
+
+The Admin Dashboard uses custom JSONForms renderers:
+
+- `AccordionArrayLayoutRendererComponent`: For expandable array sections
+- `ExpandGroupRendererComponent`: For expandable groups
+- `ArrayLayoutRendererCustom`: For custom array layouts
+
+These are registered in `src/app/admin/admin-config-edit/admin-config-edit.component.ts`
+
+---
+
+## 5. Usage Examples
+
+### Example 1: Global Authorization for All Tiles
+
+**Use Case**: Restrict entire dataset detail component to specific groups
+
+**Configuration (Admin Dashboard)**:
+1. Navigate to Dataset Detail Component section
+2. Set **Authorization** to: `["admin", "data-managers"]`
+3. Save configuration
+
+**Configuration (JSON)**:
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "authorization": ["admin", "data-managers"],
+    "customization": [...]
+  }
+}
+```
+
+**Result**: All tiles in the dataset detail page are only visible to users in the "admin" or "data-managers" groups.
+
+---
+
+### Example 2: Tile-Specific Authorization
+
+**Use Case**: Show general info to everyone, but restrict scientific metadata to scientists
+
+**Configuration (Admin Dashboard)**:
+1. In Customization Configuration
+2. Add two tiles:
+   - Tile 1: "General Information" with empty authorization `[]` (visible to all)
+   - Tile 2: "Scientific Metadata" with authorization `["scientists", "admin"]`
+3. Save configuration
+
+**Configuration (JSON)**:
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "customization": [
+      {
+        "type": "regular",
+        "label": "General Information",
+        "order": 1,
+        "row": 1,
+        "col": 10,
+        "authorization": [],
+        "fields": [...]
+      },
+      {
+        "type": "scientificMetadata",
+        "label": "Scientific Metadata",
+        "order": 2,
+        "row": 2,
+        "col": 10,
+        "authorization": ["scientists", "admin"],
+        "source": "scientificMetadata",
+        "viewMode": "table"
+      }
+    ]
+  }
+}
+```
+
+**Result**: 
+- All users see "General Information" tile
+- Only users in "scientists" or "admin" groups see "Scientific Metadata" tile
+
+---
+
+### Example 3: Combined Global and Tile Authorization
+
+**Use Case**: Global restriction with tile-level overrides
+
+**Configuration**:
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "authorization": ["admin", "scientists"],
+    "customization": [
+      {
+        "type": "regular",
+        "label": "Public Summary",
+        "order": 1,
+        "authorization": [],
+        "fields": [...]
+      },
+      {
+        "type": "scientificMetadata",
+        "label": "Detailed Metadata",
+        "order": 2,
+        "authorization": ["admin"],
+        "source": "scientificMetadata"
+      }
+    ]
+  }
+}
+```
+
+**Result**:
+- "Public Summary" tile: Visible to all users (tile-level override)
+- "Detailed Metadata" tile: Visible only to "admin" users (tile-level restriction)
+- Other tiles: Follow global authorization (admin and scientists)
+
+---
+
+### Example 4: Hidden Tile
+
+**Use Case**: Hide a tile from all users
+
+**Configuration**:
+```json
+{
+  "type": "attachments",
+  "label": "Internal Attachments",
+  "order": 3,
+  "authorization": [],
+  "source": "attachments"
+}
+```
+
+**Result**: The "Internal Attachments" tile is hidden from all users, including administrators.
+
+---
+
+### Example 5: Multiple Group Requirements
+
+**Use Case**: Tile visible to users in any of multiple groups
+
+**Configuration**:
+```json
+{
+  "type": "regular",
+  "label": "Sensitive Data",
+  "authorization": ["group-a", "group-b", "group-c"],
+  "fields": [...]
+}
+```
+
+**Result**: Tile is visible to users who are members of **any** of the specified groups (OR logic).
+
+---
+
+## 6. Authorization Rules
+
+### Authorization Evaluation Logic
+
+The authorization system follows this evaluation order:
+
+1. **Tile-level authorization** (if present) takes precedence
+2. **Global datasetDetailComponent authorization** (if present)
+3. **Default**: `[]` (visible to all authenticated users)
+
+### Authorization Matching
+
+| User Groups | Tile Authorization | Visible? |
+|-------------|---------------------|----------|
+| `["user"]` | `[]` | Yes |
+| `["user"]` | `["admin"]` | No |
+| `["user", "scientist"]` | `["scientist", "admin"]` | Yes (OR logic) |
+| `["user"]` | `null`/`undefined` | Yes (defaults to `[]`) |
+| Not authenticated | Any | No (requires authentication) |
+
+### Special Groups
+
+There are no special groups. Empty array `[]` means no restriction (visible to all).
+
+### Important Notes
+
+- The authorization check uses the user's `accessGroups` from their profile
+- If a user is not authenticated, they will not see any tiles
+- Multiple groups can be specified; the user needs to be a member of **at least one** of them (OR logic)
+- Empty array `[]` means no restriction (visible to all)
+- To hide a tile, set the `visible` property to `false`
+- This feature is fully backward compatible: existing configurations without `authorization` fields will continue to work, with all tiles visible to all users
+
+---
+
+## 7. Troubleshooting
+
+### Issue: Tiles Not Visible to Expected Users
+
+**Symptoms**:
+- Authorized users cannot see tiles they should have access to
+- All tiles are hidden
+
+**Diagnosis**:
+
+1. **Check user's accessGroups**:
+   ```typescript
+   // In browser console (after login)
+   const user = JSON.parse(localStorage.getItem('currentUser'));
+   console.log('User groups:', user?.accessGroups);
+   ```
+
+2. **Check active configuration**:
+   ```typescript
+   // Inject AppConfigService
+   const config = this.appConfigService.getConfig();
+   console.log('Dataset Detail Config:', config.datasetDetailComponent);
+   ```
+
+3. **Verify backend configuration**:
+   - Use Swagger UI or API client to call `/api/v3/runtime-config/frontendConfig`
+   - Verify the `datasetDetailComponent` section is correct
+
+**Solutions**:
+
+1. **Verify user group membership**:
+   - Ensure the user is assigned to the correct groups in the backend
+   - Check with your administrator
+
+2. **Check configuration syntax**:
+   - Validate JSON syntax using a JSON validator
+   - Ensure `authorization` is an array of strings
+
+3. **Verify configuration is loaded**:
+   - Check browser console for configuration load errors
+   - Verify the backend endpoint is accessible
+
+4. **Check for typos**:
+   - Ensure group names match exactly (case-sensitive)
+
+---
+
+### Issue: "No applicable renderer found!" Error in Admin Dashboard
+
+**Symptoms**:
+- The authorization field shows "No applicable renderer found!" in the admin form
+- Cannot edit the authorization array
+
+**Cause**: The JSONForms renderer doesn't have a default control for array of strings.
+
+**Solution**: Update the uiSchema to use `ListWithDetail` for the authorization field:
+
+```json
+{
+  "type": "ListWithDetail",
+  "scope": "#/properties/datasetDetailComponent/properties/authorization",
+  "options": {
+    "detail": {
+      "type": "VerticalLayout",
+      "elements": [
+        {
+          "type": "Control",
+          "scope": "#/properties"
+        }
+      ]
+    }
+  }
+}
+```
+
+This change should be made in `src/app/admin/schema/frontend.config.jsonforms.json`.
+
+---
+
+### Issue: Authorization Changes Not Applied
+
+**Symptoms**:
+- Configuration saved but changes not reflected
+- Old authorization rules still in effect
+
+**Diagnosis**:
+
+1. Check if configuration was saved successfully
+2. Verify the backend received the update
+3. Check if frontend configuration cache needs clearing
+
+**Solutions**:
+
+1. **Force refresh**: Clear browser cache and reload
+2. **Check backend logs**: Verify the configuration update was persisted
+3. **Verify endpoint**: Ensure `/api/v3/runtime-config/frontendConfig` returns the updated configuration
+4. **Restart application**: Some deployments may require application restart
+
+---
+
+### Issue: All Tiles Hidden After Adding Authorization
+
+**Symptoms**:
+- All tiles disappeared after adding authorization
+- Only administrators can see tiles
+
+**Cause**: Likely set global authorization without appropriate groups or with non-empty array.
+
+**Solution**:
+
+1. Use an empty array `[]` to include all authenticated users:
+   ```json
+   "authorization": []
+   ```
+
+2. Or add the appropriate user groups:
+   ```json
+   "authorization": ["users", "scientists", "admin"]
+   ```
+
+3. Or remove the authorization field to revert to default behavior
+
+---
+
+### Common Pitfalls
+
+| Pitfall | Solution |
+|---------|----------|
+| Case sensitivity in group names | Use exact case matching |
+| Forgetting to save configuration | Click "Save" button in admin dashboard |
+| Using `null` instead of `[]` for public tiles | Use empty array `[]` for no restriction |
+| To hide a tile | Set `visible: false` |
+| Expecting AND logic between groups | Authorization uses OR logic (any group matches) |
+
+---
+
+## 8. FAQ
+
+### Q: What happens if I don't configure authorization?
+
+**A**: If you don't add any authorization configuration, all tiles are **visible to all authenticated users** by default. This maintains backward compatibility with existing deployments.
+
+### Q: Can I use authorization without enabling customized components?
+
+**A**: No. The `authorization` field is only applicable when `enableCustomizedComponent` is set to `true`. If customized components are disabled, the default dataset detail view is used, and tile-level authorization does not apply.
+
+### Q: Can I use both global and tile-level authorization?
+
+**A**: Yes. When both are configured:
+- Tile-level authorization takes precedence for that specific tile
+- Global authorization applies to tiles without their own authorization
+- This allows for a mix of globally restricted and tile-specific access controls
+
+### Q: How do I make a tile visible to everyone?
+
+**A**: Use an empty array `[]` for the tile's authorization, or omit the authorization field entirely (which defaults to `[]`).
+
+### Q: How do I completely hide a tile?
+
+**A**: Set the `visible` property to `false`.
+
+### Q: Can I use wildcards or patterns in group names?
+
+**A**: No. Group names must match exactly. Wildcards, patterns, or regular expressions are not supported. The user must be a member of the exact group name specified.
+
+### Q: How does authorization work with the backend permission system?
+
+**A**: The dataset detail tile authorization is a **frontend-only** feature that controls UI visibility. It does not affect backend API access. Users with appropriate backend permissions can still access data through the API. This feature only controls what is displayed in the frontend UI.
+
+### Q: Can I customize the "No authorization" message?
+
+**A**: Currently, tiles that a user is not authorized to see are simply hidden (not rendered). There is no visible message indicating that content is hidden. This is by design to avoid revealing the existence of sensitive content.
+
+### Q: How do I show a lock icon on restricted tiles?
+
+**A**: Enable the `tileRestrictedIconVisible` configuration flag under `datasetDetailComponent`:
+```json
+{
+  "datasetDetailComponent": {
+    "enableCustomizedComponent": true,
+    "tileRestrictedIconVisible": true,
+    "tileRestrictedIconGroups": ["admin", "scientists"],
+    "customization": [...]
+  }
+}
+```
+When enabled, tiles with restricted access (non-empty authorization array defined) will display a lock icon (`lock_outline`) in their header with a "Restricted access" tooltip.
+
+### Q: How do I test my authorization configuration?
+
+**A**: 
+1. Log in as different users with various group memberships
+2. Navigate to a dataset detail page
+3. Verify which tiles are visible for each user
+4. Check browser console for any authorization-related errors
+5. Use the JSON Preview in the admin dashboard to verify your configuration
+
+### Q: Can I use this feature with custom tiles?
+
+**A**: Yes. Any custom tile type (regular, scientificMetadata, datasetJsonView, attachments) supports the authorization field.
+
+### Q: What's the maximum number of groups I can specify?
+
+**A**: There is no hard limit on the number of groups. However, for performance and maintainability, it's recommended to keep the list reasonable (under 20 groups).
+
+### Q: Can I use this feature with the default (non-customized) dataset detail view?
+
+**A**: No. Authorization only works when `enableCustomizedComponent` is `true` and you have defined custom tiles in the `customization` array. The default dataset detail view does not support tile-level authorization.
+
+### Q: How do I migrate from an old configuration?
+
+**A**: Existing configurations without authorization fields will continue to work unchanged. All tiles will be visible to all authenticated users. To add authorization:
+1. Add the `authorization` field to `datasetDetailComponent` or individual tiles
+2. Test with different user groups
+3. Gradually restrict access as needed
+
+### Q: Where can I find the user's group memberships?
+
+**A**: User group memberships are managed in the backend user management system. In SciCat, users typically belong to groups defined in the backend configuration or database. Check with your system administrator for group management details.
+
+---
+
+## Appendix A: Related Documentation
+
+- [About Page Configuration](about-page-configuration.md)
+- [Help Page Configuration](help-page-configuration.md)
+- [Frontend Configuration Testing](frontend-configuration-testing.md)
+
+---
+
+## Appendix B: File References
+
+| File | Purpose |
+|------|---------|
+| `src/app/admin/schema/frontend.config.jsonforms.json` | JSONForms schema and UI schema definition |
+| `src/app/admin/admin-config-edit/admin-config-edit.component.ts` | Admin dashboard component |
+| `src/app/admin/admin-config-edit/admin-config-edit.component.html` | Admin dashboard template |
+| `src/app/app-config.service.ts` | Configuration service and interfaces |
+| `src/app/state-management/models/index.ts` | TypeScript model interfaces |
+| `src/app/datasets/dataset-detail-dynamic/dataset-detail-dynamic.component.ts` | Dataset detail component logic |
+| `src/app/datasets/dataset-detail-dynamic/dataset-detail-dynamic.component.html` | Dataset detail component template |
+| `src/app/datasets/dataset-detail-dynamic/dataset-detail-dynamic.component.scss` | Dataset detail component styling |
+| `src/assets/config.json` | Default frontend configuration |
+| `src/assets/config.override.json` | Environment-specific configuration overrides |
+
+---
+
+*Last updated: August 17, 2026*
+*Documentation for SciCat Frontend Dataset Detail Tile Authorization Feature*
+
diff --git a/src/app/admin/schema/frontend.config.jsonforms.json b/src/app/admin/schema/frontend.config.jsonforms.json
index cbeabe0a1..989bda3d0 100644
--- a/src/app/admin/schema/frontend.config.jsonforms.json
+++ b/src/app/admin/schema/frontend.config.jsonforms.json
@@ -163,7 +163,6 @@
             "url": { "type": "string" },
             "target": { "type": "string" },
             "enabled": { "type": "string" },
-            "authorization": { "type": "array", "items": { "type": "string" } },
             "inputs": {
               "type": "array",
               "items": {
@@ -358,6 +357,17 @@
         "type": "object",
         "properties": {
           "enableCustomizedComponent": { "type": "boolean" },
+          "tileRestrictedIconVisible": {
+            "type": "boolean",
+            "title": "Restricted Tiles Indicator Enabled",
+            "description": "Display a Restricted Tile Indicator (lock icon) on tiles with restricted access"
+          },
+          "tileRestrictedIconGroups": {
+            "type": "array",
+            "title": "Restricted Tiles Indicator Groups",
+            "description": "List of user groups that can see the Restricted Tile Icon on dataset tiles",
+            "items": { "type": "string" }
+          },
           "customization": {
             "type": "array",
             "items": {
@@ -381,6 +391,10 @@
                   "type": "string",
                   "enum": ["table", "json", "tree"]
                 },
+                "authorization": {
+                  "type": "array",
+                  "items": { "type": "string" }
+                },
 
                 "options": {
                   "type": "object",
@@ -686,10 +700,6 @@
                     "options": { "multi": true }
                   },
                   { "type": "Control", "scope": "#/properties/filename" },
-                  {
-                    "type": "Control",
-                    "scope": "#/properties/authorization"
-                  },
                   {
                     "type": "Control",
                     "scope": "#/properties/variables",
@@ -817,6 +827,14 @@
             "type": "Control",
             "scope": "#/properties/datasetDetailComponent/properties/enableCustomizedComponent"
           },
+          {
+            "type": "Control",
+            "scope": "#/properties/datasetDetailComponent/properties/tileRestrictedIconVisible"
+          },
+          {
+            "type": "Control",
+            "scope": "#/properties/datasetDetailComponent/properties/tileRestrictedIconGroups"
+          },
           {
             "type": "ListWithDetail",
             "label": "Customization Configuration",
@@ -830,7 +848,11 @@
                     "elements": [
                       { "type": "Control", "scope": "#/properties/label" },
                       { "type": "Control", "scope": "#/properties/type" },
-                      { "type": "Control", "scope": "#/properties/order" },
+                      { "type": "Control", "scope": "#/properties/order" }]
+                  },
+                  {
+                    "type": "HorizontalLayout",
+                    "elements": [
                       { "type": "Control", "scope": "#/properties/row" },
                       { "type": "Control", "scope": "#/properties/col" },
                       {
@@ -848,6 +870,15 @@
                       }
                     ]
                   },
+                  {
+                    "type": "HorizontalLayout",
+                    "elements": [
+                      {
+                        "type": "Control",
+                        "scope": "#/properties/authorization"
+                      }
+                    ]
+                  },
                   {
                     "type": "VerticalLayout",
                     "label": "Attachments Options",
diff --git a/src/app/app-config.service.spec.ts b/src/app/app-config.service.spec.ts
index 349b10628..56b306d26 100644
--- a/src/app/app-config.service.spec.ts
+++ b/src/app/app-config.service.spec.ts
@@ -234,6 +234,12 @@ const appConfig: AppConfigInterface = {
     enabled: false,
     htmlContent: "This is not my about",
   },
+  datasetDetailComponent: {
+    enableCustomizedComponent: false,
+    customization: [],
+    tileRestrictedIconVisible: false,
+    tileRestrictedIconGroups: ["admin"],
+  },
 };
 
 describe("AppConfigService", () => {
@@ -382,6 +388,12 @@ describe("AppConfigService", () => {
           enabled: false,
           htmlContent: "This is the mockConfigResponses config.json about",
         },
+        datasetDetailComponent: {
+          enableCustomizedComponent: false,
+          customization: [],
+          tileRestrictedIconVisible: false,
+          tileRestrictedIconGroups: ["admin"],
+        },
       },
       "/assets/config.override.json": {
         accessTokenPrefix: "Bearer ",
@@ -399,6 +411,12 @@ describe("AppConfigService", () => {
           htmlContent:
             "This is the mockConfigResponses config.override.json about",
         },
+        datasetDetailComponent: {
+          enableCustomizedComponent: false,
+          customization: [],
+          tileRestrictedIconVisible: false,
+          tileRestrictedIconGroups: ["admin"],
+        },
       },
     };
 
@@ -426,6 +444,12 @@ describe("AppConfigService", () => {
         htmlContent:
           "This is the mockConfigResponses config.override.json about",
       },
+      datasetDetailComponent: {
+        enableCustomizedComponent: false,
+        customization: [],
+        tileRestrictedIconVisible: false,
+        tileRestrictedIconGroups: ["admin"],
+      },
     };
 
     const mockHttpGet = (
diff --git a/src/app/app-config.service.ts b/src/app/app-config.service.ts
index b04b28f1d..8a2ed06d2 100644
--- a/src/app/app-config.service.ts
+++ b/src/app/app-config.service.ts
@@ -355,6 +355,14 @@ export class AppConfigService {
       };
     }
 
+    if (config.datasetDetailComponent) {
+      config.datasetDetailComponent.tileRestrictedIconVisible =
+        config.datasetDetailComponent.tileRestrictedIconVisible ?? false;
+
+      config.datasetDetailComponent.tileRestrictedIconGroups = config
+        .datasetDetailComponent.tileRestrictedIconGroups ?? ["admin"];
+    }
+
     applyDefaultBatchActions(config);
     validateAllActionConfigsIn(config);
 
diff --git a/src/app/datasets/dataset-detail/dataset-detail-dynamic/_dataset-detail-dynamic-theme.scss b/src/app/datasets/dataset-detail/dataset-detail-dynamic/_dataset-detail-dynamic-theme.scss
index 79bcefe86..15e8273f4 100644
--- a/src/app/datasets/dataset-detail/dataset-detail-dynamic/_dataset-detail-dynamic-theme.scss
+++ b/src/app/datasets/dataset-detail/dataset-detail-dynamic/_dataset-detail-dynamic-theme.scss
@@ -9,8 +9,12 @@
   $header-2: map.get($color-config, "header-2");
   $header-3: map.get($color-config, "header-3");
   $header-4: map.get($color-config, "header-4");
+  $header-5: map.get($color-config, "header-5");
   $warn: map.get($color-config, "warn");
   $warn-2: map.get($color-config, "warn-2");
+  .dynamic-template-tile-header {
+    background-color: mat.m2-get-color-from-palette($header-5, "lighter");
+  }
   .dynamic-template-general-header {
     background-color: mat.m2-get-color-from-palette($primary, "lighter");
   }
diff --git a/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.html b/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.html
index ca65ca09d..aaf1549db 100644
--- a/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.html
+++ b/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.html
@@ -28,7 +28,7 @@
     *ngIf="dataset$ | async as dataset"
   >
     <!-- Iterate over each section in datasetView -->
-    <ng-container *ngFor="let section of datasetView">
+    <ng-container *ngFor="let section of datasetView$ | async">
       <ng-container [ngSwitch]="section.type">
         <!-- Status Banner Section -->
         <div
@@ -50,13 +50,19 @@
           <mat-card>
             <!-- Section Header -->
             <mat-card-header
-              class="dynamic-template-general-header sticky-header"
+              class="dynamic-template-tile-header sticky-header"
               data-cy="section-label"
             >
               <div mat-card-avatar class="section-icon">
                 <mat-icon>description</mat-icon>
               </div>
-              {{ section.label | translate: localization }}
+              <span>{{ section.label | translate: localization }}</span>
+              <span
+                *ngIf="section.restrictedIconVisible"
+                class="restricted-indicator"
+              >
+                <mat-icon [matTooltip]="formatAuthorizedGroups(section.authorization)">lock_outline</mat-icon>
+              </span>
             </mat-card-header>
             <!-- Section Content -->
             <mat-card-content>
@@ -170,13 +176,19 @@
           <ng-container *ngIf="emptyMetadataTable()">
             <mat-card>
               <mat-card-header
-                class="scientific-header sticky-header"
+                class="dynamic-template-tile-header sticky-header"
                 data-cy="section-label"
               >
                 <div mat-card-avatar class="section-icon">
                   <mat-icon>science</mat-icon>
                 </div>
                 <span>{{ section.label | translate: localization }}</span>
+                <span
+                  *ngIf="section.restrictedIconVisible"
+                  class="restricted-indicator"
+                >
+                  <mat-icon [matTooltip]="formatAuthorizedGroups(section.authorization)">lock_outline</mat-icon>
+                </span>
               </mat-card-header>
               <mat-card-content class="scientific-metadata-content">
                 <ng-container *ngIf="appConfig.tableSciDataEnabled">
@@ -228,13 +240,19 @@
         >
           <mat-card>
             <mat-card-header
-              class="dynamic-template-attachments-header sticky-header"
+              class="dynamic-template-tile-header sticky-header"
               data-cy="section-label"
             >
               <div mat-card-avatar class="section-icon">
                 <mat-icon>photo_library</mat-icon>
               </div>
-              {{ section.label | translate: localization }}
+              <span>{{ section.label | translate: localization }}</span>
+              <span
+                *ngIf="section.restrictedIconVisible"
+                class="restricted-indicator"
+              >
+                <mat-icon [matTooltip]="formatAuthorizedGroups(section.authorization)">lock_outline</mat-icon>
+              </span>
             </mat-card-header>
             <mat-card-content>
               <ng-container *ngIf="attachments$ | async as attachments">
@@ -295,13 +313,19 @@
         >
           <mat-card>
             <mat-card-header
-              class="dynamic-template-json-view-header sticky-header"
+              class="dynamic-template-tile-header sticky-header"
               data-cy="section-label"
             >
               <div mat-card-avatar class="section-icon">
                 <mat-icon>data_object</mat-icon>
               </div>
-              {{ section.label | translate: localization }}
+              <span>{{ section.label | translate: localization }}</span>
+              <span
+                *ngIf="section.restrictedIconVisible"
+                class="restricted-indicator"
+              >
+                <mat-icon [matTooltip]="formatAuthorizedGroups(section.authorization)">lock_outline</mat-icon>
+              </span>
             </mat-card-header>
             <mat-card-content>
               <ng-container *ngIf="appConfig.jsonMetadataEnabled">
diff --git a/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.scss b/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.scss
index 5a3a6302d..5bd6b4c10 100644
--- a/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.scss
+++ b/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.scss
@@ -141,3 +141,22 @@ mat-card {
   justify-content: flex-end;
   margin-top: 8px;
 }
+
+/* Restricted access indicator */
+.restricted-indicator {
+  margin-left: auto;
+  display: flex;
+  align-items: center;
+
+  mat-icon {
+    font-size: 18px;
+    height: 18px;
+    width: 18px;
+    opacity: 0.7;
+    cursor: default;
+
+    &:hover {
+      opacity: 1;
+    }
+  }
+}
diff --git a/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.ts b/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.ts
index a47e16738..1ab7c5497 100644
--- a/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.ts
+++ b/src/app/datasets/dataset-detail/dataset-detail-dynamic/dataset-detail-dynamic.component.ts
@@ -1,8 +1,9 @@
 import { Component, OnInit, OnDestroy } from "@angular/core";
 
 import { MatDialog } from "@angular/material/dialog";
-import { Store } from "@ngrx/store";
-import { Subscription } from "rxjs";
+import { createSelector, Store } from "@ngrx/store";
+import { Subscription, Observable } from "rxjs";
+import { map } from "rxjs/operators";
 
 import { showMessageAction } from "state-management/actions/user.actions";
 import {
@@ -10,7 +11,11 @@ import {
   selectCurrentDataset,
   selectCurrentDatasetWithoutFileInfo,
 } from "state-management/selectors/datasets.selectors";
-import { selectIsLoading } from "state-management/selectors/user.selectors";
+import {
+  selectCurrentUser,
+  selectIsLoading,
+  selectProfile,
+} from "state-management/selectors/user.selectors";
 import { selectCurrentInstrument } from "state-management/selectors/instruments.selectors";
 
 import { AppConfigService } from "app-config.service";
@@ -27,7 +32,10 @@ import {
 import { AttachmentService } from "shared/services/attachment.service";
 import { DatePipe } from "@angular/common";
 import { OutputDatasetObsoleteDto } from "@scicatproject/scicat-sdk-ts-angular/model/outputDatasetObsoleteDto";
-import { Instrument } from "@scicatproject/scicat-sdk-ts-angular";
+import {
+  Instrument,
+  ReturnedUserDto,
+} from "@scicatproject/scicat-sdk-ts-angular";
 import { ActivatedRoute, Router } from "@angular/router";
 import { MatSnackBar } from "@angular/material/snack-bar";
 import {
@@ -35,6 +43,12 @@ import {
   ActionItems,
 } from "shared/modules/configurable-actions/configurable-action.interfaces";
 
+// profile.selectors.ts
+export const selectProfileAccessGroups = createSelector(
+  selectProfile,
+  (profile) => profile?.accessGroups || [],
+);
+
 /**
  * Component to show customizable details for a dataset, using the
  * form component
@@ -50,7 +64,7 @@ import {
 export class DatasetDetailDynamicComponent implements OnInit, OnDestroy {
   private subscriptions: Subscription[] = [];
 
-  datasetView: CustomizationItem[];
+  datasetView$: Observable<CustomizationItem[]>;
   form: FormGroup;
   cols = 10;
   gutterSize = 12;
@@ -58,6 +72,8 @@ export class DatasetDetailDynamicComponent implements OnInit, OnDestroy {
   appConfig = this.appConfigService.getConfig();
 
   localization = "dataset";
+  tileRestrictedIconVisible: boolean;
+  tileRestrictedIconGroups: string[];
 
   dataset$ = this.store.select(selectCurrentDataset);
   datasetWithout$ = this.store.select(selectCurrentDatasetWithoutFileInfo);
@@ -65,6 +81,10 @@ export class DatasetDetailDynamicComponent implements OnInit, OnDestroy {
   loading$ = this.store.select(selectIsLoading);
   show = false;
 
+  userGroups$ = this.store.select(selectProfileAccessGroups);
+
+  user: ReturnedUserDto | undefined;
+
   instrument: Instrument | undefined;
   dataset: OutputDatasetObsoleteDto | undefined;
 
@@ -83,21 +103,48 @@ export class DatasetDetailDynamicComponent implements OnInit, OnDestroy {
     private router: Router,
     private route: ActivatedRoute,
     private snackBar: MatSnackBar,
-  ) {}
+  ) {
+    this.tileRestrictedIconVisible =
+      this.appConfig.datasetDetailComponent?.tileRestrictedIconVisible ?? false;
+    this.tileRestrictedIconGroups =
+      this.appConfig.datasetDetailComponent?.tileRestrictedIconGroups ?? [];
+  }
 
   ngOnInit() {
     this.form = this.fb.group({});
 
+    this.subscriptions.push(
+      this.store.select(selectCurrentUser).subscribe((user) => {
+        if (user) {
+          this.user = user;
+        }
+      }),
+    );
+
     const sortedDatasetView = (
       this.appConfig.datasetDetailComponent?.customization || []
-    ).sort((a, b) => a.order - b.order);
-    sortedDatasetView.forEach((section) => {
-      if (section.fields && Array.isArray(section.fields)) {
-        section.fields.sort((a, b) => a.order - b.order);
-      }
-    });
-
-    this.datasetView = sortedDatasetView;
+    )
+      .sort((a, b) => a.order - b.order)
+      .map((section) => ({
+        ...section,
+        authorization: section.authorization ? [...section.authorization] : [],
+        visible: section.visible ?? true,
+        fields:
+          section.fields && Array.isArray(section.fields)
+            ? [...section.fields].sort((a, b) => a.order - b.order)
+            : section.fields,
+      }));
+
+    this.datasetView$ = this.userGroups$.pipe(
+      map((userGroups) =>
+        sortedDatasetView
+          .filter((section) => this.showTile(section, userGroups))
+          .map((section) => ({
+            ...section,
+            restrictedIconVisible: this.showRestrictedIcon(section, userGroups),
+          })),
+      ),
+    );
 
     this.subscriptions.push(
       this.store.select(selectCurrentInstrument).subscribe((instrument) => {
@@ -120,6 +167,68 @@ export class DatasetDetailDynamicComponent implements OnInit, OnDestroy {
     );
   }
 
+  /**
+   * Checks if the current user can view a block based on authorization
+   * @param blockAuthorization - Optional array of group names from block.authorization
+   * @param userGroups - Array of groups the current user belongs to
+   * @returns true if user can view the block
+   */
+  showTile(section: CustomizationItem, userGroups: string[]): boolean {
+    if (!section.visible) {
+      return false;
+    }
+
+    if (!section.authorization || section.authorization.length === 0) {
+      return true;
+    }
+
+    if (!this.user) {
+      return false;
+    }
+
+    return section.authorization.some((group) => userGroups.includes(group));
+  }
+
+  /**
+   * Checks if a section has restricted access and should show the lock icon
+   * @param section - The customization item/section to check
+   * @returns true if the section is restricted and the feature is enabled
+   */
+  showRestrictedIcon(
+    section: CustomizationItem,
+    userGroups: string[],
+  ): boolean {
+    if (!this.tileRestrictedIconVisible) {
+      // the icon is disabled by configuration
+      return false;
+    }
+    if (!section.authorization || section.authorization.length === 0) {
+      return false;
+    }
+    if (this.tileRestrictedIconGroups.length == 0) {
+      // the icon is visible to everybody
+      return true;
+    }
+    // check if any of the user groups is listed in the group who can see the icon
+    return this.tileRestrictedIconGroups.some((group) =>
+      userGroups.includes(group),
+    );
+  }
+
+  /**
+   * Formats authorization groups for tooltip display as a comma-separated list.
+   * Shows group names as they are defined in configuration.
+   *
+   * @param groups - Array of group names with access, or undefined
+   * @returns Comma-separated string of group names, or empty string
+   */
+  formatAuthorizedGroups(groups: string[] | undefined): string {
+    if (!groups || groups.length === 0) {
+      return "";
+    }
+    return groups.join(", ");
+  }
+
   onCopy(value: string) {
     navigator.clipboard.writeText(value).then(
       () => {
diff --git a/src/app/state-management/models/index.ts b/src/app/state-management/models/index.ts
index 272b63eb3..94d2623a5 100644
--- a/src/app/state-management/models/index.ts
+++ b/src/app/state-management/models/index.ts
@@ -45,6 +45,8 @@ export interface LabelsLocalization {
 export interface DatasetDetailComponentConfig {
   enableCustomizedComponent: boolean;
   customization: CustomizationItem[];
+  tileRestrictedIconVisible?: boolean;
+  tileRestrictedIconGroups?: string[];
 }
 
 export interface IngestorComponentConfig {
@@ -85,6 +87,9 @@ export interface CustomizationItem {
   source?: string;
   options?: AttachmentOptions;
   viewMode?: viewModeOptions;
+  authorization?: string[];
+  visible?: boolean;
+  restrictedIconVisible?: boolean;
 }
 
 export interface Field {
diff --git a/src/app/theme.ts b/src/app/theme.ts
index 6dcf13d3c..99167dbe1 100644
--- a/src/app/theme.ts
+++ b/src/app/theme.ts
@@ -50,6 +50,12 @@ export const light: Theme = {
     "--theme-header-4-lighter-contrast": "#000000",
     "--theme-header-4-darker": "#9b429b",
     "--theme-header-4-darker-contrast": "#ffffff",
+    "--theme-header-5-default": "#7f7f7f",
+    "--theme-header-5-default-contrast": "#ffffff",
+    "--theme-header-5-lighter": "#e5e5e5",
+    "--theme-header-5-lighter-contrast": "#000000",
+    "--theme-header-5-darker": "#4c4c4c",
+    "--theme-header-5-darker-contrast": "#ffffff",
     "--theme-hover-default": "#7f7f7f",
     "--theme-hover-default-contrast": "#000000",
     "--theme-hover-lighter": "#e5e5e5",
diff --git a/src/assets/config.json b/src/assets/config.json
index 262cd9f6b..dcfdf1c63 100644
--- a/src/assets/config.json
+++ b/src/assets/config.json
@@ -748,6 +748,8 @@
   "timezone": "UTC",
   "datasetDetailComponent": {
     "enableCustomizedComponent": false,
+    "tileRestrictedIconVisible": false,
+    "tileRestrictedIconGroups": ["admin"],
     "customization": [
       {
         "type": "statusBanner",
diff --git a/src/assets/theme.json b/src/assets/theme.json
index 401aac130..6056e689e 100644
--- a/src/assets/theme.json
+++ b/src/assets/theme.json
@@ -49,6 +49,12 @@
     "--theme-header-4-lighter-contrast": "#000000",
     "--theme-header-4-darker": "#9b429b",
     "--theme-header-4-darker-contrast": "#ffffff",
+    "--theme-header-5-default": "#7f7f7f",
+    "--theme-header-5-default-contrast": "#ffffff",
+    "--theme-header-5-lighter": "#e5e5e5",
+    "--theme-header-5-lighter-contrast": "#000000",
+    "--theme-header-5-darker": "#4c4c4c",
+    "--theme-header-5-darker-contrast": "#ffffff",
     "--theme-hover-default": "#7f7f7f",
     "--theme-hover-default-contrast": "#000000",
     "--theme-hover-lighter": "#e5e5e5",
diff --git a/src/styles.scss b/src/styles.scss
index 59d65484a..e5348a712 100644
--- a/src/styles.scss
+++ b/src/styles.scss
@@ -152,6 +152,17 @@ $theme-header-4: (
   ),
 );
 
+$theme-header-5: (
+  default: var(--theme-header-5-default),
+  lighter: var(--theme-header-5-lighter),
+  darker: var(--theme-header-5-darker),
+  contrast: (
+    default: var(--theme-header-5-default-contrast),
+    lighter: var(--theme-header-5-lighter-contrast),
+    darker: var(--theme-header-5-darker-contrast),
+  ),
+);
+
 $theme-hover: (
   default: var(--theme-hover-default),
   lighter: var(--theme-hover-lighter),
@@ -191,6 +202,12 @@ $header-4: mat.m2-define-palette(
   "lighter",
   "darker"
 );
+$header-5: mat.m2-define-palette(
+  $theme-header-5,
+  "default",
+  "lighter",
+  "darker"
+);
 $hover: mat.m2-define-palette($theme-hover, "default", "lighter", "darker");
 
 $basetheme: mat.m2-define-light-theme(
@@ -211,8 +228,9 @@ $newcolor: map.merge(
     warn-2: $warn-2,
     header-1: $header-1,
     header-2: $header-2,
-    header-3: $header-4,
+    header-3: $header-3,
     header-4: $header-4,
+    header-5: $header-5,
     hover: $hover,
   )
 );
@@ -476,4 +494,4 @@ display: inline-flex;
 .mat-mdc-form-field-icon-suffix {
 display: flex;
 align-items: center;
-}
\ No newline at end of file
+}