this post was submitted on 03 Apr 2025
33 points (97.1% liked)

homeassistant

13636 readers
55 users here now

Home Assistant is open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server. Available for free at home-assistant.io

founded 2 years ago
MODERATORS
 

So I just learned that apparently Home Assistant has absolutely no user account control. My roommate has no need to access the lights, electrical outlets, etc. in my room, and has absolutely no reason to be able to see my phone's battery charge level and charger status.

top 12 comments
sorted by: hot top controversial new old
[–] thehatfox@lemmy.world 17 points 1 day ago

It's a feature that's often been requested, but hasn't appeared yet. The best option out of the box is creating non-Administrator users and then creating custom dashboards and panes per user with only the controls they need.

But that doesn't stop a user from poking around still, because they can still access all devices and entities through features like the Logbook - which is always accessible because sidebar items can't be controller per user.

There are some HACS bits that might be able to lock things down a bit further, like Kiosk and Guest modes.

I've heard some people get round this by setting up inebriations with Apple/Google/Amazon ecosystem, only exposing the desired entities/devices, and then giving others access to those and keeping them out of Home Assistant altogether.

It's a feature set I wish they would add/expand, I'm sure anyone with a home office and mischievous children would agree.

[–] lorentz@feddit.it 24 points 1 day ago

there is a feature request with a lot of good comments on their forum. The summary of the last time I checked it was on the lines: "it is a reasonable request but it is terribly hard to implement it correctly and since we currently have no capacity to do it we prefer leaving it not implemented instead of offering any alternative which could give a false sense of security"

[–] Ebby@lemmy.ssba.com 18 points 1 day ago

There are basic, basic permission controls and hiding info from non-admin users. But it's nasty for a big setup.

I imagine it would be implemented in the future, but priorities aren't there yet.

I agree though, would be a nice feature to have.

[–] thr0w4w4y2@sh.itjust.works 0 points 18 hours ago (1 children)

Sounds like a use case for touchscreen wall controllers like Shelly ones. Controlling things in your house by unlocking your phone, opening the app, finding the right dashboard, pressing buttons is a poor user experience compared with operating a switch on the wall.

[–] bob_lemon@feddit.org 0 points 9 hours ago* (last edited 9 hours ago)

True, but adding a light switch still doesn't prevent their roommate from opening their app and turning on their lights.

[–] Moonrise2473@feddit.it 9 points 1 day ago

Ugly hack that I've done: setup a completely separate HA instance, then sync only the components that the user needs using remote ha

[–] spedswir@lemmy.world 7 points 1 day ago (1 children)

What I would do is install kiosk mode from HACS. Build a dashboard for them that only shows what you want them to see, then add kiosk mode so they can't access the menus. Set it as their default and it should be fine

[–] dan@upvote.au 6 points 1 day ago (2 children)

This just hides the menus. They can still access all of Home Assistant.

[–] spedswir@lemmy.world 1 points 21 hours ago

I know it doesn't inherently fix the problem, but unless they really go poking or messing with it (most users wont) it should keep them contained to the subset of options tou want them to use.

[–] Cyber@feddit.uk 3 points 1 day ago

You can require user login to HA and then disable visibility to dashboards for that (non-admin) user, etc... wouldn't that work?