# Survey on a New User Management Application for Node-RED

**URL:** <https://discourse.nodered.org/t/survey-on-a-new-user-management-application-for-node-red/80554>\
**Category:** General\
**Tags:** node-red-dashboard, security, docker\
**Created:** [14 August 2023 09:09 UTC](https://discourse.nodered.org/t/survey-on-a-new-user-management-application-for-node-red/80554 "2023-08-14T09:09:36Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![bakman2](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bakman2/32/6207_2.png) [@bakman2](https://discourse.nodered.org/u/bakman2)\
**Post date:** [22 August 2023 06:06 UTC](https://discourse.nodered.org/t/survey-on-a-new-user-management-application-for-node-red/80554/4 "2023-08-22T06:06:04Z")

</div>

Note - my comments are based on the assumption that you intent to monetize a security solution aimed for enterprise purposes.

There are 2 things -

- node-red - the editor
- dashboard

Node-RED by its very nature just runs and executes - only specific people (one that develops flows) require access to the editor. I don't see how this could be done in a multi-user setup, other than having user accountability with an audit trail and perhaps read-only capabilities.

That solution is already available: adminAuth settings can be customized for use with other authentication methods. If they can play easily along with today's security requirements I am not sure.  
Many enterprises are moving to dynamic credential solutions like Hashicorp Vault.

The dashboard is in my opinion a different aspect/beast that should require separate security requirements and could/should have things like RBAC, but then in turn also LDAP, Radius etc integration.

But then again - if one is thinking about these complex strategies - a custom dashboard would also show up in the picture - with data as API served over http-in with custom authentication via httpNodeAuth

Note that a [new version of the dashboard is in development](https://discourse.nodered.org/t/dashboard-2-0-pre-alpha-available/80142), I don't know if security is in the scope or if it is a technology migration only.

I don't see why an enterprise would choose a custom security solution over flowforge.  
Just my 2 cents.

---

_[View the full topic](https://discourse.nodered.org/t/survey-on-a-new-user-management-application-for-node-red/80554)._