Easy way to make HA accessible remotely(without DDNS+PORT FORWARDING)

There are now two levels of user, but I am not sure how fine grained the permissions are.