Multiple users in "disable single account mode" #1027

Open
opened 2025-11-20 05:22:34 -05:00 by saavagebueno · 20 comments
Owner

Originally created by @Gifff69 on GitHub (Jun 27, 2024).

I am using selfhosted Netbird. I would like to create new network for separate department.
Different network with separate account can be achieved when disabled single account mode. However, no other users can be associated to each separated account. Does Netbird support multiple users with multiple accounts?

image

image

Are you using NetBird Cloud?

Self-hosted

Originally created by @Gifff69 on GitHub (Jun 27, 2024). I am using selfhosted Netbird. I would like to create new network for separate department. Different network with separate account can be achieved when disabled single account mode. However, no other users can be associated to each separated account. Does Netbird support multiple users with multiple accounts? ![image](https://github.com/netbirdio/netbird/assets/174077046/d3f38704-51ee-4ad0-99b9-2220b05a5935) ![image](https://github.com/netbirdio/netbird/assets/174077046/eaa08e9d-c25f-486d-977c-21c6ee74b715) Are you using NetBird Cloud? Self-hosted
saavagebueno added the feature-request label 2025-11-20 05:22:34 -05:00
Author
Owner

@bcmmbaga commented on GitHub (Jun 28, 2024):

Hello @Gifff69, Currently this feature is not yet supported. Could you please share more about why you need multiple department accounts in Netbird? How do you plan to manage and associate multiple users with these separate accounts?

@bcmmbaga commented on GitHub (Jun 28, 2024): Hello @Gifff69, Currently this feature is not yet supported. Could you please share more about why you need multiple department accounts in Netbird? How do you plan to manage and associate multiple users with these separate accounts?
Author
Owner

@Gifff69 commented on GitHub (Jun 28, 2024):

Hello @Gifff69, Currently this feature is not yet supported. Could you please share more about why you need multiple department accounts in Netbird? How do you plan to manage and associate multiple users with these separate accounts?

I would like to manage different department network by using same Management UI.
Each account have owner who can create new user and assign to admin or user role.
The idea is same as Netbird Cloud. https://docs.netbird.io/how-to/add-users-to-your-network
Separated network for each account and associate multiple users under same Management UI. i.e. app.netbird.io.

Do you have roadmap to add this feature? Can share the schedule?

@Gifff69 commented on GitHub (Jun 28, 2024): > Hello @Gifff69, Currently this feature is not yet supported. Could you please share more about why you need multiple department accounts in Netbird? How do you plan to manage and associate multiple users with these separate accounts? I would like to manage different department network by using same Management UI. Each account have owner who can create new user and assign to admin or user role. The idea is same as Netbird Cloud. https://docs.netbird.io/how-to/add-users-to-your-network Separated network for each account and associate multiple users under same Management UI. i.e. app.netbird.io. Do you have roadmap to add this feature? Can share the schedule?
Author
Owner

@bcmmbaga commented on GitHub (Jun 28, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

@bcmmbaga commented on GitHub (Jun 28, 2024): it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.
Author
Owner

@Gifff69 commented on GitHub (Jun 28, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

@Gifff69 commented on GitHub (Jun 28, 2024): > it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources. When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?
Author
Owner

@bcmmbaga commented on GitHub (Jun 28, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

@bcmmbaga commented on GitHub (Jun 28, 2024): > > it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources. > > When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account? You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide
Author
Owner

@Gifff69 commented on GitHub (Jun 28, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply.
In summary, can selfhosted NetBird support this hierarchy?
Account1, network1, => user01-05
Account2, network2, => user01-05
Account3, network3, => user01-05

@Gifff69 commented on GitHub (Jun 28, 2024): > > > it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources. > > > > > > When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account? > > You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05
Author
Owner

@Gifff69 commented on GitHub (Jul 1, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05

@bcmmbaga
Can confirm if Selfhosted NetBird support the hierarchy below? Thanks.
Account1, network1, => user01-05;
Account2, network2, => user01-05;
Account3, network3, => user01-05

@Gifff69 commented on GitHub (Jul 1, 2024): > > > > it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources. > > > > > > > > > When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account? > > > > > > You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide > > Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05 @bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05
Author
Owner

@bcmmbaga commented on GitHub (Jul 2, 2024):

To understand your requirement better, are these user01-05 the same for all three accounts?

@bcmmbaga commented on GitHub (Jul 2, 2024): To understand your requirement better, are these user01-05 the same for all three accounts?
Author
Owner

@Gifff69 commented on GitHub (Jul 2, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05

@bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05

To understand your requirement better, are these user01-05 the same for all three accounts?

no, separate users under corresponding account/network.

@Gifff69 commented on GitHub (Jul 2, 2024): > > > > > it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources. > > > > > > > > > > > > When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account? > > > > > > > > > You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide > > > > > > Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05 > > @bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05 > To understand your requirement better, are these user01-05 the same for all three accounts? no, separate users under corresponding account/network.
Author
Owner

@bcmmbaga commented on GitHub (Jul 2, 2024):

it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources.

When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account?

You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide

Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05

@bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05

To understand your requirement better, are these user01-05 the same for all three accounts?

no, separate users under corresponding account/network.

Yes, this is supported.

@bcmmbaga commented on GitHub (Jul 2, 2024): > > > > > > it's not currently on our roadmap. in the meantime, you can manage the network by creating a single account and controlling departmental access with access control policies. This setup allows all users to belong to the same organization account while maintaining segregated access to organizational network resources. > > > > > > > > > > > > > > > When I disable single account mode, it implies that creating separated network. In this case, how to create multiple users for each account? > > > > > > > > > > > > You should use single account mode (do not disable single account mode). This way, all organizational users are managed within the same account. You can add users from your Identity Provider (IdP), and they will be automatically synced to your NetBird instance. For detailed instructions on setting up and integrating with a supported IdP, you can refer to our self-hosting guide at https://docs.netbird.io/selfhosted/selfhosted-guide > > > > > > > > > Thanks for reply. In summary, can selfhosted NetBird support this hierarchy? Account1, network1, => user01-05 Account2, network2, => user01-05 Account3, network3, => user01-05 > > > > > > @bcmmbaga Can confirm if Selfhosted NetBird support the hierarchy below? Thanks. Account1, network1, => user01-05; Account2, network2, => user01-05; Account3, network3, => user01-05 > > > To understand your requirement better, are these user01-05 the same for all three accounts? > > no, separate users under corresponding account/network. Yes, this is supported.
Author
Owner

@Gifff69 commented on GitHub (Jul 2, 2024):

I can create one account/network only associated with 3users by using default selfhosted "single account mode".
Please advise how to create another account/network.

image

@Gifff69 commented on GitHub (Jul 2, 2024): I can create one account/network only associated with 3users by using default selfhosted "single account mode". Please advise how to create another account/network. ![image](https://github.com/netbirdio/netbird/assets/174077046/6cce2a27-e739-4edc-88ab-094367a88506)
Author
Owner

@mlsmaycon commented on GitHub (Jul 2, 2024):

@Gifff69, can you share more about your deployment? We usually advise administrators to use groups and access control to segregate accounts within a single org, especially when this department configuration might need to connect to each other, and disabling the single account mode will make that very hard.

Also, can you share what is your identity provider? Does it support updating JWT claims? It seems like you are using Zitadel from our quick start guide and some Gmail accounts, but that won't work with these domains.

@mlsmaycon commented on GitHub (Jul 2, 2024): @Gifff69, can you share more about your deployment? We usually advise administrators to use groups and access control to segregate accounts within a single org, especially when this department configuration might need to connect to each other, and disabling the single account mode will make that very hard. Also, can you share what is your identity provider? Does it support updating JWT claims? It seems like you are using Zitadel from our quick start guide and some Gmail accounts, but that won't work with these domains.
Author
Owner

@Gifff69 commented on GitHub (Jul 2, 2024):

@mlsmaycon, Understanding that using groups and access control to segregate accounts within a single org. But it would be difficult to manage plenty of peers. Thus, we would like to create another account which act as new organization. Each account associated multiples users form new network and have separated peers.

Yes, you are right, we are using Zitadel from quick start guide and some Gmail accounts.
Kindly advise why that won't work with these domains? How to achieve above requirement?

@Gifff69 commented on GitHub (Jul 2, 2024): @mlsmaycon, Understanding that using groups and access control to segregate accounts within a single org. But it would be difficult to manage plenty of peers. Thus, we would like to create another account which act as new organization. Each account associated multiples users form new network and have separated peers. Yes, you are right, we are using Zitadel from quick start guide and some Gmail accounts. Kindly advise why that won't work with these domains? How to achieve above requirement?
Author
Owner

@Gifff69 commented on GitHub (Jul 2, 2024):

@mlsmaycon, Understanding that using groups and access control to segregate accounts within a single org. But it would be difficult to manage plenty of peers. Thus, we would like to create another account which act as new organization. Each account associated multiples users form new network and have separated peers.

Yes, you are right, we are using Zitadel from quick start guide and some Gmail accounts. Kindly advise why that won't work with these domains? How to achieve above requirement?

@mlsmaycon, in other words, kindly advise if selfhosted netbird support multi-organization.

BTW, I think it is similar case raised before. Can share the update? Thanks.
https://github.com/netbirdio/netbird/issues/446

@Gifff69 commented on GitHub (Jul 2, 2024): > @mlsmaycon, Understanding that using groups and access control to segregate accounts within a single org. But it would be difficult to manage plenty of peers. Thus, we would like to create another account which act as new organization. Each account associated multiples users form new network and have separated peers. > > Yes, you are right, we are using Zitadel from quick start guide and some Gmail accounts. Kindly advise why that won't work with these domains? How to achieve above requirement? @mlsmaycon, in other words, kindly advise if selfhosted netbird support multi-organization. BTW, I think it is similar case raised before. Can share the update? Thanks. https://github.com/netbirdio/netbird/issues/446
Author
Owner

@BJorah commented on GitHub (Jul 22, 2024):

Hi! @Gifff69
Would you please tell me How to set up a self-hosted server to disable single account mode?
so that I can create serval different nets on one server.

@BJorah commented on GitHub (Jul 22, 2024): Hi! @Gifff69 Would you please tell me **How to set up a self-hosted server to disable single account mode?** so that I can create serval different nets on one server.
Author
Owner

@Gifff69 commented on GitHub (Jul 23, 2024):

Hi! @Gifff69 Would you please tell me How to set up a self-hosted server to disable single account mode? so that I can create serval different nets on one server.

Follow this under advanced guide.
https://docs.netbird.io/selfhosted/selfhosted-guide#step-4-disable-single-account-mode-optional

@Gifff69 commented on GitHub (Jul 23, 2024): > Hi! @Gifff69 Would you please tell me **How to set up a self-hosted server to disable single account mode?** so that I can create serval different nets on one server. Follow this under advanced guide. https://docs.netbird.io/selfhosted/selfhosted-guide#step-4-disable-single-account-mode-optional
Author
Owner

@BJorah commented on GitHub (Jul 23, 2024):

@Gifff69
Thanks for replying me!
Follow the guide, I add "--disable-single-account-mode"
Besides,need I remove this line bellow?
image

@BJorah commented on GitHub (Jul 23, 2024): @Gifff69 Thanks for replying me! Follow the guide, I add "--disable-single-account-mode" Besides,need I remove this line bellow? ![image](https://github.com/user-attachments/assets/66d2ec9e-dc98-4b9e-b2bd-1d5ccfe6fba9)
Author
Owner

@Gifff69 commented on GitHub (Jul 23, 2024):

@Gifff69 Thanks for replying me! Follow the guide, I add "--disable-single-account-mode" Besides,need I remove this line bellow? image

no, just keep it.

@Gifff69 commented on GitHub (Jul 23, 2024): > @Gifff69 Thanks for replying me! Follow the guide, I add "--disable-single-account-mode" Besides,need I remove this line bellow? ![image](https://private-user-images.githubusercontent.com/140866412/351269957-66d2ec9e-dc98-4b9e-b2bd-1d5ccfe6fba9.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjE3MjgwMDYsIm5iZiI6MTcyMTcyNzcwNiwicGF0aCI6Ii8xNDA4NjY0MTIvMzUxMjY5OTU3LTY2ZDJlYzllLWRjOTgtNGI5ZS1iMmJkLTFkNWNjZmU2ZmJhOS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjQwNzIzJTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI0MDcyM1QwOTQxNDZaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0zNGE0OTVjNWI5ODAwY2Y3YWRlMWE0NjU4OTM5YzY0OWZiNGIwN2FjMzAwZGJlOWY1MzhjNjQwMmQ0NDNjZjE5JlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCZhY3Rvcl9pZD0wJmtleV9pZD0wJnJlcG9faWQ9MCJ9.qOlln0EDlpeoxcV7XtsbXbHpTBisPZPyZ_CT2QKUxCU) no, just keep it.
Author
Owner

@BJorah commented on GitHub (Jul 24, 2024):

@Gifff69 I truly appreciate your timely help. I have successfully made it :)

@BJorah commented on GitHub (Jul 24, 2024): @Gifff69 I truly appreciate your timely help. I have successfully made it :)
Author
Owner

@ghazyami commented on GitHub (Sep 3, 2025):

Is this not implement yet? Would be nice to have.

  • One netbird instance.
  • Multiple accounts.
  • Each account has an owner and users.
@ghazyami commented on GitHub (Sep 3, 2025): Is this not implement yet? Would be nice to have. - One netbird instance. - Multiple accounts. - Each account has an owner and users.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1027