Multiple users in "disable single account mode"

[Gifff69]

I am using selfhosted Netbird. I would like to create new network for separate department.
Different network with separate account can be achieved when disabled single account mode. However, no other users can be associated to each separated account. Does Netbird support multiple users with multiple accounts?

Are you using NetBird Cloud?

Self-hosted

[bcmmbaga]

Hello @Gifff69, Currently this feature is not yet supported. Could you please share more about why you need multiple department accounts in Netbird? How do you plan to manage and associate multiple users with these separate accounts?

[Gifff69]

Hello @Gifff69, Currently this feature is not yet supported. Could you please share more about why you need multiple department accounts in Netbird? How do you plan to manage and associate multiple users with these separate accounts?

I would like to manage different department network by using same Management UI.
Each account have owner who can create new user and assign to admin or user role.
The idea is same as Netbird Cloud. https://docs.netbird.io/how-to/add-users-to-your-network
Separated network for each account and associate multiple users under same Management UI. i.e. app.netbird.io.

Do you have roadmap to add this feature? Can share the schedule?

[bcmmbaga]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

[Gifff69]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

[bcmmbaga]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

[Gifff69]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply.
In summary, can selfhosted NetBird support this hierarchy?
Account1, network1, => user01-05
Account2, network2, => user01-05
Account3, network3, => user01-05

[Gifff69]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05

@bcmmbaga
Can confirm if Selfhosted NetBird support the hierarchy below? Thanks.
Account1, network1, => user01-05;
Account2, network2, => user01-05;
Account3, network3, => user01-05

[bcmmbaga]

To understand your requirement better, are these user01-05 the same for all three accounts?

[Gifff69]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05

@bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05

To understand your requirement better, are these user01-05 the same for all three accounts?

no, separate users under corresponding account/network.

[bcmmbaga]

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05

@bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05

To understand your requirement better, are these user01-05 the same for all three accounts?

no, separate users under corresponding account/network.

Yes, this is supported.

[Gifff69]

I can create one account/network only associated with 3users by using default selfhosted "single account mode".
Please advise how to create another account/network.

[mlsmaycon]

@Gifff69, can you share more about your deployment? We usually advise administrators to use groups and access control to segregate accounts within a single org, especially when this department configuration might need to connect to each other, and disabling the single account mode will make that very hard.

Also, can you share what is your identity provider? Does it support updating JWT claims? It seems like you are using Zitadel from our quick start guide and some Gmail accounts, but that won't work with these domains.

[Gifff69]

@mlsmaycon, Understanding that using groups and access control to segregate accounts within a single org. But it would be difficult to manage plenty of peers. Thus, we would like to create another account which act as new organization. Each account associated multiples users form new network and have separated peers.

Yes, you are right, we are using Zitadel from quick start guide and some Gmail accounts.
Kindly advise why that won't work with these domains? How to achieve above requirement?

[Gifff69]

@mlsmaycon, Understanding that using groups and access control to segregate accounts within a single org. But it would be difficult to manage plenty of peers. Thus, we would like to create another account which act as new organization. Each account associated multiples users form new network and have separated peers.

Yes, you are right, we are using Zitadel from quick start guide and some Gmail accounts. Kindly advise why that won't work with these domains? How to achieve above requirement?

@mlsmaycon, in other words, kindly advise if selfhosted netbird support multi-organization.

BTW, I think it is similar case raised before. Can share the update? Thanks.
#446

[BJorah]

Hi! @Gifff69
Would you please tell me How to set up a self-hosted server to disable single account mode?
so that I can create serval different nets on one server.

[Gifff69]

Hi! @Gifff69 Would you please tell me How to set up a self-hosted server to disable single account mode? so that I can create serval different nets on one server.

Follow this under advanced guide.
https://docs.netbird.io/selfhosted/selfhosted-guide#step-4-disable-single-account-mode-optional

[BJorah]

@Gifff69
Thanks for replying me!
Follow the guide, I add "--disable-single-account-mode"
Besides,need I remove this line bellow?

[Gifff69]

@Gifff69 Thanks for replying me! Follow the guide, I add "--disable-single-account-mode" Besides,need I remove this line bellow?

no, just keep it.

[BJorah]

@Gifff69 I truly appreciate your timely help. I have successfully made it :)