I am, little by little integrating controls into my kids rooms, main lights, ambient led lights, temperature, etc.
Now, I want to create users in HA for them and give them old phones I have where they can toggle things they want to (and use it for listening to music).
The problem I have now, is that as an admin, I can not find a way to restrict each user to their own Readonly dashboard. I do not want kid A to be able to turn on/off the lights of kid B.
This seems like a standard use case but I havenât found a direct way to do it.
How do you manage such scenarios in a sustainable way?
User management and permissions management is pretty poor in HA.
Under manage dashboards you can tag a dashboards as âadmin only.â Tag most of the dashboards and only leave one exposing what you want for the kids, using the conditional card to restrict what is seen for each user.
I just use the overview dashboard (since you canât tag it overview as admin only nor hide it from the UI) with a few cards anyone can access, then conditional cards for each user.
Doing so may mean copying the existing Overview into a new dashboard for yourself.
EDIT: You can use set view visibility inside a dashboard as well.
I run the wallpanel add on with the HA side and top bars hidden. Then use tablets throughout the house running either the HA app or a full screen browser.
While it isnât security, per se, it does prevent a user from escaping the dashboard configured to display on that device.
Assume there are 3 users (incl. admin).
Create a dashboard with 3 views & define visibility.
Then let each person use his(her) own account.
(disclaimer: this is in theory; never tried it myself)
Also probably non-admin users have some (limited probably) access to some advanced functionality like Settings, cannot say for sure.
Sorry, I was sick all these days and I could not respond before.
looks like the only way is to set the visibility and work everything inside, I still have to understand how to do the kiosk that @Jorggs meant while still letting them change apps on the Android phone.
It is weird that such as basic functionality is not inside Home Assistant. We do not live alone in our homes
Any updates on this? This is really a major problem, and renders HA useless for so many applications, where you could give selective access to people (children, elderly people, gardener, cleaning, elderly care etc.).
Obviously you dont want these people to see âLogbookâ, âEnergyâ, âHistoryâ, âMediaâ or the auto-populated "Overviewâ if you have that.
Is anyone working on this at all? Unfortunately Iâm no developer, so I canât help.
Sure one can do that. But that only applies to the comanion app and means you have to have physical access to those devices for setup. You can achieve the same visual effect (for app and browser) with integrations.
But all these are still poor and insecure workarounds instead of HA offering proper RBAC.
browsermod. by reading a other topic i came to install browsermod. it adds some features to the client. and reading this article how to set up a dashbord without the options to go out of the designated daschboard. i went in the options of browser mod.
the companion app or a browser can be forsed by browsermod not to show the header and not to show the side bar. it can be set on browser ID or on user
on a browser (laptop or pc) full screen can be activated by F11
but now with the mod over it it is real kiosk no side pannel and no header.
browser mod can be found at hacs
Hi, Iâve just found something - When you edit dashboard (pen in top right), you get to editing mode and from there press the bottom pen on top left (the one by the screen), youâll arrive in settings and when you select last card - visibility - you can pick which user can see the dashboardâŚnot tested on familymembers phones, but looks promissing.
