Admin Console User Permissions?

[elionce]

In the UDI Administrative Console, I see where you can set the ID/password for various users - but I can't seem to find where/how to set each user's permissions? i.e which devices/programs/etc each user account is allowed to access/control?

[mwester]

There's only one user - the admin account, and there's no permissions mechanism.  The additional users are for node servers, and I think that's for future use -- there's no benefit to using them as far as I've found, since there's no access control mechanism behind them.

[elionce]

Aw, that's a bummer.

So if I have a situation where i.e. I have a guest over sometimes, and I want to give them the ability to just turn one device on and off (but not give them complete unlimited access to the entirety of the system - including security, configuration, etc) - there's no way to accomplish that?  They either have unlimited access to everything, or nothing?  No workaround?

[simplextech]

You can use remotes or app interfaces for this.  I don't give "guests" access to my computer's PERIOD.

[elionce]

Right, I would give them access via the Agave app on Android.  But if the app is logged in as admin, it still has access to control to every device on the ISY, no?

[simplextech]

3 minutes ago, metal450 said:

Right, I would give them access via the Agave app on Android.  But if the app is logged in as admin, it still has access to control to every device on the ISY, no?

I don't use Agave but my understanding is that Agave supports multiple users?  I think you have to pay more for that and setup the users already but you could have a "guest" tablet setup.

[elionce]

Alright, yeah it looks like Agave does.  That does still mean I can't let them access the ISY web UI at all, which is a bit of a shame (i.e. they can't login from their own computer)...but if the ISY is admin-or-nothing, I guess Agave will do.

[simplextech]

You could still let them access the Web UI but with admin capabilities.  Which still I wouldn't want.  There's many ways to approach this without needing access to the ISY.  Apps, tablets, custom Web UI if you desire or even voice control through Alexa or Google if you just want to give the ability to turn on/off a switch for some purpose.

[elionce]

>> You could still let them access the Web UI but with admin capabilities.  Which still I wouldn't want

No, exactly - definitely not giving out my admin password to guests.

Oh well, yeah, I guess I'll stick with Agave if or until ISY's web panel itself isn't limited to admin-or-nothing (aka can support more than a one user).