Learn how to protect your routes on the frontend with React Router. Then on your backend, you can protect your GraphQL mutations and queries. You can setup fine grained permissions so you can make sure the right people are accessing the right things.