Can I take away access to Media folders to some users?

I haven’t had much experience playing with users configurations. I live in a 3 person household, I am set up as admin, and my wife and her 15 year old daughter are regular users. They barely ever log in to their accounts as mostly everything runs by itself (automations) or controlled via Alexa.

A friend of mine asked me for some help on a cameras set up for the neighbors that live on a small private street. Don’t have many details of their real wants/needs, but I know people are usually not comfortable with the whole block being able to see who comes in and out of eachothers homes.

Correct me if I am wrong, but I am pretty sure I could set each household with a user, and create a custom dashboard for each user. I did a quick test, and with the Frigate card they would have access to all recordings and live streams of which ever cams I set up on that card. I am thinking each household would have access to their own cams, and the cams at the main gate. (Granted with the front yard camera usually we get to see the comings and goings of our front neighbors home)

Now the issue I wouldn’t be able how to fix, is how to remove access to the media folders? I just checked, and with the vanilla “regular user” setup, they do have access to the media folder, which means all users would be able to view everyone else’s feed, and that is what I am trying to prevent.

Can users be set up so that they ONLY get access to the one dashboard I set up?

Nope. You might want to vote for this: Access Control: A Comprehensive Standard Integration Into The Core

Darn, I used to brag that with HA we could do pretty much ANYTHING we could think of. Recently I found out only way you can get access to automations is by giving admin rights to user. So basically the get FULL access or NO access.

For my purposes I did find a quick solution by using helpers to create switches or buttons (forget which one) for regular users to be able to turn on/off certain automations.

So I did read something about being able to create custom dashboards for specific users. I am guessing it means they would get the standard access (ie access to media folders) plus the dashboard designed for the user, but no way to take away the standard stuff? (I don’t log in as regular user often, so I don’t remember what regular users get to see).

So there is no way to hide media folders from all non admins?

You can only make your dashboards admin level user only, not the core dashboards, and you can assign default dashboards to users but you cant prevent them changing their default and neither option will help with preventing media folder access.

Would hiding the side bar work? Using kiosk-mode.

Short answer Bob would be yes. But I did continue to do some reading, and seems everyone says it only works for a specific system. For example that I could get it to “hide” on my personal computer, but if I log on to my account via my friends computer I get to see the sidebar

was gonna vote but link appears dead.
if you got the right one, would love to upvote that.

granular ACL is definitely a plus, i got a similar use case where i got users that i want to have access to a specific dashboard only and nothing else.

The linked topic was merged with this request: RBAC - Role Based Access Control (Users & Groups rights)

thanks.
yeah, RBAC makes more sense.