Per-user access control for entities and dashboards (beyond UI workarounds)

[Stan-pop]

Describe your core improvement

Introduce native per-user access control in Home Assistant, allowing admins to assign specific entities and dashboards to individual users or groups.

Current limitations

Currently, non-admin users can still see and interact with all exposed entities and dashboards. Existing workarounds (e.g. HACS Kiosk Mode, Restriction Card) only hide items visually at the UI level, but do not restrict backend access. This makes it impossible to securely separate devices between users, especially in multi-user households.

Technical benefits

True ACL (Access Control List) support for entities and dashboards.
Each user sees and controls only their assigned devices.
Improved privacy (e.g. camera streams not exposed to all users).
Increased safety (children cannot turn off sockets or lights in other rooms).
Cleaner user experience with simplified dashboards.
Stronger foundation for multi-user environments, making Home Assistant more competitive with commercial smart home platforms.

Additional context

Example use case:
In a family setup, each child should only control the light and sensors in their own room, while parents have full access.
Similar systems (e.g. commercial smart home apps) already provide per-user permissions.
This feature would be highly valuable for families and shared households.
Could also be offered as an optional premium feature through Nabu Casa.

[davefx]

This is exactly what I've been building. I have a working proof of concept that adds professional ACL to Home Assistant's core:

• Per-entity, per-area, per-device, per-domain, and per-label access control with backend enforcement
• Deny rules (not just UI hiding — the backend rejects unauthorized calls)
• Custom roles beyond admin/user/read-only
• A "kids room only" setup is as simple as: entities: {area_ids: {"kids_room": {read: true, control: true}}}

Branch: https://github.com/davefx/core/tree/feature/professional-acl
Feature request: https://github.com/orgs/home-assistant/discussions/22
Architecture discussion: home-assistant/architecture#1374

[git-damien]

Additionally, I would like my users to be able to edit their personal User Dashboard.
This would be even better if there was already a restriction on which entities they could access.

My user-case is older teenagers who have smart lights, smart watches, phones, window and door sensors, hvac vents and power monitors on their power points.
I want them each to be able to be able to customise their own data/controls without the temptation to mess with their brother. Currently they don't even ask for the features they think of, they just ignore the possibility.