TL;DR: UniFi Protect integration: "Access Prohibited" on Integrations page even as Super Admin; Owner-only API key requirement blocking setup
Hi all — hoping someone has solved this. I've been stuck for several hours and want to make sure I'm not missing something obvious before assuming it's a bug.
Goal: Connect UniFi Protect to Home Assistant so I can use camera person-detection events to trigger Lutron Caséta lighting.
My setup:
- UniFi UNVR running Protect 7.1.69, UniFi OS 5.1.12
- UniFi Cloud Gateway (UCG Fiber) — separate device from the UNVR
- 9 cameras + G4 Doorbell Pro + Smart Chime, all working fine in Protect itself
- Home Assistant Green, freshly set up, latest version
- HA UniFi Protect integration: latest as of today
What I've tried:
-
Created a local user named
homeassistanton the UNVR via Admins & Users. Gave it full Protect access. HA rejected the credentials with "Ubiquiti Cloud users are not supported. Please use a local user instead." — apparently the invite flow creates a cloud-linked user even when it looks local. -
Recreated the user via the gateway's
/admins/path with "Restrict to local access only" selected. Set role to Full Management for Protect. Same cloud-user rejection from HA. -
Tried to generate an API key while logged in as that local user at
https://10.0.1.1/settings/control-plane/integrations— got "Access Prohibited / You are not authorized to access this page." -
Promoted the
homeassistantuser to Super Admin. Still "Access Prohibited" on the Integrations page. -
Logged in as the Owner account (the original Ubiquiti SSO account that set up the console). API key page is accessible from there; generated a key successfully. But when I plug owner email + password + that API key into HA's UniFi Protect setup form, it still fails.
The contradiction I can't resolve:
- Only Owner accounts can create API keys (Super Admin gets "Access Prohibited")
- Owner accounts are cloud-linked SSO accounts
- HA's UniFi Protect integration rejects cloud users
Is there a current working path through this? Specifically:
- Is there a way to grant API key creation permission to a non-Owner local user?
- Is the Owner account actually supposed to work in HA's setup form despite being cloud-linked, and I'm hitting a different bug?
- Is there a known-good combination of UniFi OS version + Protect version + HA integration version that doesn't have this issue?
Happy to provide additional logs, screenshots, or version info. Thanks in advance to anyone who's been through this.