Granting Access to UniFi - Roles and Permissions

UniFi offers a simple and flexible system for assigning roles and permissions across the UniFi OS ecosystem. You can create Admins with the ability to view or configure settings within UniFi OS and UniFi Applications, or create application-specific Users who will interact directly with Talk, Access, or Connect hardware.


Owner is the role designated to the account that originally set up a UniFi Console. The Owner can invite other admins. By default, admins are granted Full Management permissions, however you may elect to create New Roles to apply custom permissions. These include:
  • View Only: Can view applications without configuring anything.
  • None: Cannot access an application at all.
  • Hotspot Operator (Network): Can manage guest WiFi hotspots set up by Admins.
  • Site Admin (Network): Can manage Network application settings for a specific site (only available for UniFi Consoles that support multiple sites).
  • Device Specific (Protect): Can view/edit select Protect devices (cameras, doorbells, etc.).
  • Door Attendant (Access): Can communicate with, and open, doors for users requesting entry.

Adding New Admins

Add new Admins by sending an invite to the email address associated with their UI Account. If they don't have a UI Account yet, they must first create one in order to accept the invitation. Once accepted, the UniFi Console will appear on their UniFi Site Manager at

Although a UI Account can be used for both local and remote management, some advanced Admins may opt to assign local-only credentials. Check out Sign In to UniFi for more information on local and remote management.

Note: Users that self-host the UniFi Network server on a Windows/macOS/Linux machine can add users and admins in Settings > Administration > Admins.


A User is anyone who interacts with UniFi devices during day-to-day operations. For example, an office building might have a handful of Admins but hundreds of Users.
Users may require permissions from Admins to use certain devices. For example:
  • Talk: Can use a UniFi Talk phone in a building.
  • Connect: Can adjust a room’s lighting from a Connect device.
  • Access: Can gain entry at a locked door.
Was this article helpful?
552 out of 1786 found this helpful