UniFi offers a simple and flexible system for assigning roles and permissions across the UniFi OS ecosystem. You can create Admins with the ability to view or configure settings within UniFi OS and UniFi Applications, or create application-specific Users who will interact directly with Talk, Access, or Connect hardware.

Admins

Admins are added and configured in UniFi OS. By default, they are granted Full Management permissions, however you may elect to create New Roles to apply custom permissions. Some permissions include:

View Only: Can view applications without configuring anything.
None: Cannot access the application at all.
Hotspot Operator (Network): Can manage guest WiFi hotspots set up by Admins.
Site Admin (Network): Can manage application settings for a specific site (only available for UniFi OS Consoles that host multiple sites).
Device Specific (Protect): Can view/edit select Protect devices (cameras, doorbells, etc.)
Door Attendant (Access): Can communicate with and open doors for users asking to enter

Add new Admins by inviting their UI Account’s associated email address. If they don't have an account, they must create one in order to accept the invitation. Once accepted, the UniFi OS Host will appear on their UniFi Portal at unifi.ui.com.

Although a UI Account can be used for both local and remote management, some advanced Admins may opt to assign local-only credentials. Check out Connecting to UniFi for more information on local and remote management.

Users

A User is anyone who interacts with UniFi devices during day-to-day operations. For example, an office building might have a handful of Admins but hundreds of Users.

Users may require permissions from Admins to use certain devices. For example:

Talk: Can use a UniFi Talk phone in a building.
Connect: Can adjust a room’s lighting from a Connect device
Access: Can buzz in at a locked door.