Access groups

Intro

Access groups in Home Assistant Fleet Manager let you share selected installations with people outside your core team, and decide exactly what they are allowed to do.

Admins and technicians always see every installation in your workspace, including new ones. Access group members see only the installations you select, and only the areas you unlock. That fits a property manager, an electrician or a partner company.

Create a group

As an admin, open User management and switch to the Access groups tab. Then click New access group.

Give the group a name your team will recognise.

Next, pick the installations. Tick every installation this group should see. Members see exactly this selection. Installations you add to your fleet later are never shared automatically.

Now the permissions. Without any ticks, a group only gets the basic view: the installation list, status, the dashboard and the update status. Every other area stays closed until you tick it.

For our property manager, we allow logs, updates and restarts. Each tick grants what a technician may do in that area, but only for the selected installations.

Remote access asks for confirmation first. It means administrator access to Home Assistant, and accounts created there remain even after access is withdrawn. We’ll leave it off.

If a group needs the full technician scope, Everything like a technician ticks every area except the audit log, and still asks before enabling remote access. Click Create, and the group is ready.

Add members

Members are regular users. Create a user, choose the role Access group, and select the group. Each user has exactly one role: admin, technician, or one access group.

Every member counts toward your plan’s user limit. Access groups themselves are available in every plan.

The member’s view

This is what Jamie sees after signing in. The dashboard shows only the shared installations. User management, billing and workspace settings never appear for a group, whatever you tick.

Customer data was not unlocked, so the customer list shows names and status, but no contacts or addresses.

On an installation, the restart button and the logs are available, because we ticked them. There is no remote access button.

And under Manage updates, Jamie can roll out updates to these installations.

Changing access

You can change a group at any time. Fleet Manager checks the group’s installations and permissions on every request, so changes take effect right away. If you withdraw remote access, sessions the member opened are ended.

A group can only be deleted once no users belong to it.

Access groups. Share exactly what’s needed, and nothing more.