Not sure if anyone has seen this yet, but I stumbled across this project:
Haven’t tried it, but seems like some here may be interested.
Also “Enhanced privacy controls for users, guests, and public access” is on the 2025 HA roadmap if you look. Although I’m not holding my breath since we’re already mid October.
Does Permissions | Home Assistant Developer Docs show that something is happening, going the right direction?
Based on the commit history of that page, I doubt it. The last material change was more than 6 years ago. Looks like most all of the other changes in that doc in the past 6 years have been typos and adjustments for API changes.
Or it could be the stuff they did to add the option of basic users to have admin rights.
Sorry, I don’t understand what you’re saying. What do you mean?
Bump, can’t agree more.
As IT professional, it is mandatory to have such feature. Cybersec is not optional now.
On a more personal way, I’d like to share ma HA with some relatives, without allowing them to see everything. It’s simply impossible now.
Sharing with roommates, neighbors, wife, kids and so on…Plenty of usecase!
I’m watching this topic every 1-2 month to see if something is happening 
What is the current state of development here or with other addons or the core? HomeAssistant really needs role based access control to be multi-user ready. And since most homes are “multi-user” and HomeAssistant controls ever more aspects of a home, I think this is a very important feature.
There is a discussion about this in the last release thread. However, I have to say details are scarce. HA dev said RBAC is not going to happen, but some kind of restricted access (such as a special dashboard) is more likely. But it’s not being developed yet and what exactly it will be and how it will work is not decided yet.
Seriously, it is just ridiculous that this is not even being looked at. Even a hobbyist should know this is a must-have feature
…this cannot - please, PLEASE - cannot be true, right? Are they deliberately trying to kneecap HA?
Well, maybe I did not understand them correctly. See for yourself here:
And the following replies.
Thanks for the source.I unfortunately read it the same as you did.
My god - this is one of the most obvious shortcomings of HA and has been requested forever, has been on the HA roadmap since thate HA roadmap came into existence - and now they are saying it is “not currently prioritized”.
Too bad. I was really hoping to bring HA to large-scale real estate projects. I will have to look elsewhere it seems, since RBAC is the absolut minimum for any professional application…
You could fork the source and sponsor some professional development. But be not surprised what that will cost you.
If you want a full blown RBAC you also need some kind of administration to control it.
Oh, I have no interest in doing that - I am (no longer) in the business of software development. I know full well how much it costs. If there is sufficient demand in the market, some company will at some point do it.
Deliberately omitting RBAC is just a huge strategic fail and reading through this thread will show you that a lot of people here agree.
This hobbyist knows it’s something that a lot of people posting on the forum are asking for, but I don’t see the benefits for the way I use Home Assistant. I also know that there are a lot of people who have families that use it and the last people they want to have access to it are their kids and guests in their homes.
My understanding has always been that HA’s core value proposition (in corporate speak) is its automation engine. While dashboarding has taken strides in recent years, I don’t think that is considered the main feature (but that could’ve changed).
To quote Paulus himself:
The perfect app is no app.
Home automation should blend with your current workflow, not replace it. For most devices, there is no faster way to control most devices than how you are already doing it today. Most of the time, the best app is no app. The only interface that can be more convenient, and is accessible for visitors of your home of all ages is a voice interface.
I’m not saying more fine-grained control wouldn’t be useful for some. I’m not denying this in any way. I’m pointing out a design philosophy, so to speak.
That’s a cop-out. Even if you ignore dashboards, should anyone and everyone always be able to do anything and everything? Can some random person walk in off the street and order it to crank up the heat?
RBAC is such an underlying tenet of any multi-user system that it’s as if the devs expect HA to only be used by individual people in solo occupied dwellings.
No, and they can’t in HA, so that’s a moot point and really doesn’t add to the conversation.
As an aside, the RBAC that is going to be implemented in HA is not going to be at the device/entity/service/action level it’s only going to be implemented at the user/dashboard level. This is already in-the-works in the next version and we should expect to see more when the sidebar changes are in full effect.
Thank you for insight in this matter!
This is HUGE news! I personaly think that a user/dashboard approach is much more practical than a device/enitiy level. Thank you so much, I am stoked to see whats coming!