#User based dashboard configuration

1 messages · Page 1 of 1 (latest)

bronze aspen
#

So I'm hosting sone servers and want some friends to have access to only one dashboard that is containing server relevant information.

Or I have a guest account for when I have someone over so they can control stuff in the guest room. But they end up having control about a lot more than I want to and there seems to be no way to reduce it down to just some specific things.

How can I achieve that?

Because they still have access to the standart dashboard, assist, To-do and may other things that I cannot restrict at all.

Like them being able to use the assist alone opens up the control about most of my place and that is a privacy nightmare.

Like I'm frustrated and out of ideas.

wind schooner
#

currently you have to have some minimal level of trust for your friends and guests (I'm assuming they are the same thing) because this kind of role based access is just not implemented at the moment. They are already in your home so you must trust them to some extent. Assist doesn't have that much leeway. What kind of privacy nightmare are you envisioning?

bronze aspen
#

I have moat of my sensors connected to my assist so they can even find out who is at my house and even body sensor stuff up to exact location

#

And I still want to keep access to a minimum to accounts that could get hacked by someone getting their browser cookies stolen and so on

humble sail
#

is e.g. Fully Kiosk on a (old) tablet in combination with Kiosk Mode in HA an option?

raw swallow
#

@primal halo I saw your post about some new stuff browser-mod can do. #1360819293658288269 message
Would this be something that might be useful to OP's question?

#

Like Tom suggested, the tablet with Fully Kiosk Browser would be the best bet. This will probably cause less hassle in the long run.

  • Getting guests onto your network and actually connected to HA (WIFI SSID/password; HA username/password)
  • Keeping them out of stuff you don't want them in (there's no real User Access Control in HA)
  • Ensuring a good user experience without having to worry about their specific hardware (are they on a phone with a big screen or little screen? tablet? Android/iOS? Some of those things can play a factor in the design of the dashboard.)
    Take all those variables out of the equation and put the tablet (that you control) in the room. Bare in mind that this would still not be 100% secure. Put a bored teenager alone with the tablet and they're going to get past all your restrictions.
    You can also apply some Kiosk Mode options to help lock some stuff down (such as hiding the sidebar, header, and other stuff like the Assist button.) browser_mod may give some options too.
bronze aspen
#

I don't need to give people my Wifi to access my HA because it is accessible via the internet (IP ban on failed login is enabled).

#

I also have no spare hardware laying around.

#

My dashboards are designed with phones and PCs in mind, so I have no issues with that part.

#

I think Kiosk mode will be a messy way to fix this big issue of HA until it breaks eventually with an update or something.
But does it work with the app as well?
Because it would be a huge flaw if not.

#

I just wish you could set the default dashboard on a per user bases, have user based assistant settings, and that you could disable access to specific dashboards like To-do, HACS and so on as well. 😔

humble sail
#

if you setup kiosk mode the right way, your dashboards can seperatly be controlled what to show (dashboard per user), access and so on, would suggest reading some info on kiosk mode and/or fully kiosk