# Can adminAuth be used to redirect different users to different Dashboard 2.0 pages?

**URL:** <https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548>\
**Category:** Dashboard\
**Tags:** node-red-dashboard, dashboard-2\
**Created:** [28 July 2026 10:00 UTC](https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548 "2026-07-28T10:00:55Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chetana](https://avatars.discourse-cdn.com/v4/letter/c/dbc845/32.png) [@Chetana](https://discourse.nodered.org/u/Chetana)\
**Post date:** [28 July 2026 10:00 UTC](https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548/1 "2026-07-28T10:00:55Z")

</div>

Hi everyone,

I have a requirement for a SCADA project using Node-RED Dashboard 2.0.

I understand that `adminAuth` in `settings.js` can support multiple users, for example:

/_adminAuth: {  
type: "credentials",  
users: [  
{ username: "user\_admin", password: "", permissions: "_" },  
{ username: "user\_design1", password: "", permissions: "_" },  
{ username: "user\_design2", password: "", permissions: "_" },  
{ username: "user\_operations1", password: "", permissions: "_" },  
{ username: "user\_operations2", password: "", permissions: "_" },  
{ username: "user\_it", password: "", permissions: "\*" }  
]  
} \*/

My customer's requirement is:

- There is only **one URL** for the application.
- Users authenticate using `adminAuth`.
- After login, **each username should automatically be directed to a different Dashboard 2.0 page**.

For example:

- `user_admin` → Dashboard A
- `user_design1` → Dashboard B
- `user_design2` → Dashboard B
- `user_operations1` → Dashboard C
- `user_operations2` → Dashboard C
- `user_it` → Dashboard D

My questions are:

1. Is this possible using `adminAuth` alone?
2. Is the authenticated username available within Dashboard 2.0 or Node-RED flows after login?
3. If not, what would be the recommended approach for implementing this type of role-based dashboard routing while keeping a single URL?

Any guidance or examples would be greatly appreciated.

Thank you.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [28 July 2026 10:20 UTC](https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548/2 "2026-07-28T10:20:22Z")

</div>

Do you realise that, having logged in, any user can access all pages in the dashboard?

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [28 July 2026 10:22 UTC](https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548/3 "2026-07-28T10:22:29Z")

</div>

This may be helpful: [Building Multi-Tenant Dashboards | Node-RED Dashboard 2.0](https://dashboard.flowfuse.com/user/multi-tenancy.html)

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [28 July 2026 10:48 UTC](https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548/4 "2026-07-28T10:48:15Z")

</div>

Admin auth is separate to user auth. Admin auth applies to the Node-RED Editor and Admin API's, not to Dashboards, http-in/-response or UIBUILDER. The two different contexts actually use different ExpressJS web servers.

Dashboard 2 and UIBUILDER both support common HTTP authentication and user headers such as you would get from a secured proxy or applying common authentication tools to ExpressJS. This is what you would need.

> [@Colin](#):
>
> This may be helpful: [Building Multi-Tenant Dashboards | Node-RED Dashboard 2.0](https://dashboard.flowfuse.com/user/multi-tenancy.html)

I think this page may have something that is slightly misleading? The "Understanding Client Data" section talks about the use of `socketId` and `socketIp` properties without providing the background context regarding their limitations.

SocketId, for example, will change all too often. A reloaded page or a temporary disconnection (e.g. client browser goes to sleep) will change that ID. SocketIp may not always show the correct end user IP since it depends a lot on intermediate proxy settings and having proxy trust configured in Node-RED.

UIBUILDER provides a more stable client id along with browser tab id's and best attempt at user real IP. The socketId is still available.

As mentioned, both D2 and UIBUILDER both support common 3rd-party authentication headers.

> [@Colin](#):
>
> Do you realise that, having logged in, any user can access all pages in the dashboard?

This is something we keep having to remind people of. If you have a "Single Page App" (SPA) such as either of the 2 Dashboards or using UIBUILDER's `uib-router` library, the resulting "pages" are virtual routes and not actual, separate HTTP endpoints. As such they do not provide guaranteed security or privacy.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [27 August 2026 10:49 UTC](https://discourse.nodered.org/t/can-adminauth-be-used-to-redirect-different-users-to-different-dashboard-2-0-pages/101548/5 "2026-08-27T10:49:08Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.