A more powerful and flexible multi-role access control solution.
Provides granular permission management for Home Assistant by intercepting service calls, based on a pure whitelist mechanism.
In Version V3, we have completely redesigned the permission model, shifting from a Single-role approach to a Multi-role Union model:
- Multi-role Support: A user can have multiple roles at the same time, and the final permissions are the union of the permissions of all activated roles.
- Pure Whitelist Mode: "Deny all" by default; only entities and services explicitly authorized in roles are accessible.
- Dynamic Template Evaluation: Leverage the Home Assistant template engine to dynamically determine whether a role is active based on real-time status (e.g., geographic location, time).
- Admin Exemption: System administrators automatically bypass all restrictions to ensure core configurations remain secure and accessible at all times.
- 🛡️ Service Call Interception: Deep integration with the underlying Service Registry to automatically intercept and validate all Home Assistant service calls.
- 👥 Multi-role Management: Support assigning multiple roles to users with automatic permission merging.
- 📝 YAML & GUI Dual-Driven: Configure via a modern web interface or directly edit the
access_control.yamlfile. - 🔍 Granular Control: Support permission management at the Domain, Entity, and specific Service levels.
- 🚀 Deep Frontend Integration: Works with
rbac.jsto automatically hide unauthorized entities in the Quick-bar for a cleaner UI experience. - 🔄 Hot Reload: Configuration changes take effect immediately without restarting Home Assistant.
- 📊 Deny Logging: Built-in
deny_loginterface to track and record all unauthorized access attempts in real time.
(It is recommended to update the screenshot of the V3 multi-role assignment interface here)
- Role Management: Define complex whitelist rules.
- User Assignment: Select multiple roles for users.
- Dynamic Conditions: Configure the
merge_conditiontemplate.
- Search for
Multi-RBACin HACS and install it. - Restart Home Assistant.
- Add
RBACon the Integrations page. - Access the configuration panel from the sidebar to start setup.
- Copy
custom_components/rbacto yourcustom_componentsdirectory. - Restart Home Assistant and install the integration.
With V3's Template Conditions, you can implement highly intelligent scenario control. For example:
Scenario: Temporary Guest Permissions
The "Guest Role" only takes effect when the guest is at home (based on geographic location). If the guest leaves, they cannot control home devices even if their account remains active.
# Use merge_condition in role configuration
merge_condition: "{{ states('person.guest') == 'home' }}"The project adopts a modern architecture with separation of frontend and backend: Backend: Python (Home Assistant Integration), using Monkey-patching technology to implement non-intrusive middleware. Frontend: Preact + Ant Design + Vite, building an extremely lightweight and responsive admin backend.
This project is open source under the MIT License. Pull Requests and Issues are welcome!