Flask has no concept of user accounts, roles, or permissions. Flask-Login is the standard extension for session-based authentication with real user accounts.