mirror of
https://github.com/netbirdio/docs.git
synced 2026-10-25 14:09:04 +01:00
Add share a profile between users usecase
This commit is contained in:
@@ -186,6 +186,54 @@ netbird up --setup-key <SETUP_KEY>
|
||||
|
||||
Run `netbird up` as the user that you set with `--owner`. If you omit `--owner`, the owner is the user who ran `sudo`.
|
||||
|
||||
## Share a profile between users
|
||||
|
||||
On a shared computer, for example in a lab or at a reception desk, many users can use the same profile. A profile has only one owner, so profile ownership stops the other users.
|
||||
|
||||
To let a known set of users share all profiles, do these three steps:
|
||||
|
||||
1. Restrict the daemon to a group. Only users in this group can connect to the daemon.
|
||||
2. Turn off profile ownership. All users in the group can then use all profiles and control the connection.
|
||||
3. Turn off the automatic claim of the default profile. Without this step, the first user at the console becomes the owner. If you turn on profile ownership again later, the other users then lose access to the default profile.
|
||||
|
||||
Users outside the group cannot connect to the daemon at all.
|
||||
|
||||
### Linux
|
||||
|
||||
1. Create a group and add the users:
|
||||
|
||||
```shell
|
||||
sudo groupadd netbird-users
|
||||
sudo usermod -aG netbird-users alice
|
||||
sudo usermod -aG netbird-users bob
|
||||
```
|
||||
|
||||
2. Install the service with the group and the environment variables:
|
||||
|
||||
```shell
|
||||
sudo netbird service install \
|
||||
--allow-group netbird-users \
|
||||
--service-env NB_DISABLE_PROFILE_OWNERSHIP=true,NB_DISABLE_DEFAULT_PROFILE_CLAIM=true
|
||||
```
|
||||
|
||||
If the service is already installed, use `netbird service reconfigure` with the same flags.
|
||||
|
||||
A new group membership applies at the next login of the user.
|
||||
|
||||
### Windows
|
||||
|
||||
In an elevated terminal, set the groups or accounts as a comma-separated list:
|
||||
|
||||
```shell
|
||||
netbird service install --allow-group "NetBird Users" --service-env NB_DISABLE_PROFILE_OWNERSHIP=true,NB_DISABLE_DEFAULT_PROFILE_CLAIM=true
|
||||
```
|
||||
|
||||
Administrators and LocalSystem always keep access.
|
||||
|
||||
<Warning>
|
||||
All users in the group can read and change all profiles, and connect or disconnect the machine. Add only users that you trust with the NetBird connection of this machine.
|
||||
</Warning>
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### Another user has this machine connected
|
||||
|
||||
Reference in New Issue
Block a user