# As an admin I do not want my users to see all users on the platform

**URL:** <https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151>\
**Category:** Done!\
**Created:** [October 18, 2018, 9:16am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151 "2018-10-18T09:16:49Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![agilex](https://avatars.discourse-cdn.com/v4/letter/a/e47c2d/32.png) [@agilex](https://community.passbolt.com/u/agilex)\
**Post date:** [October 18, 2018, 9:16am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/1 "2018-10-18T09:16:49Z")

</div>

Hi all,  
Is it possible to make hide the list of users ? if I move to the Users section, the user can see the list of users and their mails.  
i.e.  
If my company has 100 employees, I woudn’t others users to view the entire list.

Many tranks in advance  
Pietro

**Q5. Community support**  
People can vote for this idea to show traction:

_Poll ([view on site](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/1))_

---

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [October 18, 2018, 9:25am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/2 "2018-10-18T09:25:53Z")

</div>

@agilex at the moment it is not possible. Can you explain in your case what kind of users they should see? For example only the users of groups they are member of would work?

---

<div class="post-metadata">

**Author:** ![agilex](https://avatars.discourse-cdn.com/v4/letter/a/e47c2d/32.png) [@agilex](https://community.passbolt.com/u/agilex)\
**Post date:** [October 18, 2018, 9:47am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/3 "2018-10-18T09:47:21Z")

</div>

Hi@remy, thenk’s for your response.  
I do not understand why users should see this list ?! … the number of employees could be confidential information. 😧

It could be ok, if users could view only the administrator in the list so that share the credentials.

The problem is that we have about 70 employees, and seeing them all in the list is not optimal. 😞

Maybe I could try to put users in single groups? example 1/1, a group for each user?

Thanks so much for your further support  
Pietro

---

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [October 18, 2018, 9:52am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/4 "2018-10-18T09:52:45Z")

</div>

> I do not understand why users should see this list ?!

This is to enable sharing entries. People need to be able to see their details and public key for verification.

> Maybe I could try to put users in single groups? example 1/1, a group for each user?

I don’t see how this would solve your problem.

What I was suggesting is a settings where regular users could only see the other users that are part of a group they are a member off. If they are not part of any group they won’t see anybody. That’s one example of solution.

Another solution would just be to remove the link to the “users” workspace for non admin users. People will still be able to share but they won’t see the workspace. Another would just to hide all users except admin as you are suggesting.

If other users are requesting this feature we can consider it. You are the first to complain of this, but maybe more people are in your case.

---

<div class="post-metadata">

**Author:** ![agilex](https://avatars.discourse-cdn.com/v4/letter/a/e47c2d/32.png) [@agilex](https://community.passbolt.com/u/agilex)\
**Post date:** [October 23, 2018, 10:18am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/5 "2018-10-23T10:18:29Z")

</div>

@remy thank you very much for your suggestions, I wondered if the second option (ie remove the link “users”) can I apply it via configuration or I’ve to customize the application by intervening with a software modification ?

Thanks you in advance  
Pietro

---

<div class="post-metadata">

**Author:** ![agilex](https://avatars.discourse-cdn.com/v4/letter/a/e47c2d/32.png) [@agilex](https://community.passbolt.com/u/agilex)\
**Post date:** [October 31, 2018, 9:38am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/6 "2018-10-31T09:38:52Z")

</div>

Hi @remy ,

> [@remy](#):
>
> What I was suggesting is a settings where regular users could only see the other users that are part of a group they are a member off. If they are not part of any group they won’t see anybody. That’s one example of solution.

I tried this configuration but unfortunately it doesn’t change anything.  
The user (only in the group) keeps seeing all the users present in the “users” area.  
I add that the user in the group can share passwords with all users of the system, disregarding the presence of the group, inside there is himself and an administrator.

These steps:

1. Created Group
2. added administrator and a normal user
3. connected with the ‘normal’ user I continue to see all users

What am I doing wrong ?  
Thank you so much for the support

Ciao  
Pietro

---

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [October 31, 2018, 9:46am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/7 "2018-10-31T09:46:51Z")

</div>

@agilex this config does not exist yet. It was a proposal of future solution.

---

<div class="post-metadata">

**Author:** ![rauchmelder](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/rauchmelder/32/505_2.png) [@rauchmelder](https://community.passbolt.com/u/rauchmelder)\
**Post date:** [July 24, 2019, 11:30pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/8 "2019-07-24T23:30:28Z")

</div>

> [@remy](#):
>
> You are the first to complain of this, but maybe more people are in your case.

I fully agree on this idea, another solution would be to mark user as a guest.  
Guests cannot see any other user.  
In an example, the guest would be a customer, passbolt could be an optimal solution to share passwords with your customers.  
If you set up network devices, website, etc. for your customer then you could give them all passwords in one place.

Maybe an admin, can add a poll on this? 🙂

---

<div class="post-metadata">

**Author:** ![jeoff75](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/jeoff75/32/870_2.png) [@jeoff75](https://community.passbolt.com/u/jeoff75)\
**Post date:** [March 30, 2021, 9:57pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/9 "2021-03-30T21:57:47Z")

</div>

I do agree with this.

Use case : We use a password manager with our customers so that they can share their credentials to our tech team.

We want them to share credentials either :

- with pre-authorized groups.
- using an e-mail address of another user they got privately.

But they shouldn’t be able to see other customers or staff informations automatically suggested.  
Especially not their private informations like name or e-mail address.  
Nor share to the wrong group/person by accident because they selected the wrong recipient in a suggestion list.

LP does this well, you have to know the e-mail of the person you want to share with - no suggestions from the entire user database when you type (the only suggestions you get is people you already shared something with in the past).

---

<div class="post-metadata">

**Author:** ![jsm](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/jsm/32/1805_2.png) [@jsm](https://community.passbolt.com/u/jsm)\
**Post date:** [May 10, 2021, 9:14am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/10 "2021-05-10T09:14:47Z")

</div>

I agree it would be beneficial to have guests,or read-only users. If a user is read only the user can only receive “can-read” passwords, and cannot share any passwords, thus does not need the user list.

---

<div class="post-metadata">

**Author:** ![JohnHannawin](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@JohnHannawin](https://community.passbolt.com/u/JohnHannawin)\
**Post date:** [July 23, 2021, 2:55pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/11 "2021-07-23T14:55:41Z")

</div>

Hello! I think the suggestion “Another solution would just be to remove the link to the “users” workspace for non-admin users” would solve it for most of the use cases presented and would hopefully be an easy change?

Edit: On reflection, that’s not enough. Could a setting be added to the user object ‘Enable sharing’. By default it is on, but it removed the user could not see the user list or share any of their passwords (hence not have to see the user list). This is a show stopper for us using the system.

---

<div class="post-metadata">

**Author:** ![Rick](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/rick/32/1007_2.png) [@Rick](https://community.passbolt.com/u/Rick)\
**Post date:** [October 28, 2021, 7:00pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/12 "2021-10-28T19:00:46Z")

</div>

> [@remy](#):
>
> People will still be able to share but they won’t see the workspace. Another would just to hide all users except admin as you are suggesting.

just remembering an important topic

---

<div class="post-metadata">

**Author:** ![ivrybakov](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/ivrybakov/32/1055_2.png) [@ivrybakov](https://community.passbolt.com/u/ivrybakov)\
**Post date:** [December 13, 2021, 10:37am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/13 "2021-12-13T10:37:22Z")

</div>

My vote is “Must Have”!

---

<div class="post-metadata">

**Author:** ![Yan](https://avatars.discourse-cdn.com/v4/letter/y/3e96dc/32.png) [@Yan](https://community.passbolt.com/u/Yan)\
**Post date:** [December 15, 2021, 9:10am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/14 "2021-12-15T09:10:03Z")

</div>

Hi all, I also agree o this topic. No one should see all users. Only the admin.

The number of users account it’s something confident for admin.

Please, advice…

Thanks

---

<div class="post-metadata">

**Author:** ![cedric](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/cedric/32/3868_2.png) [@cedric](https://community.passbolt.com/u/cedric)\
**Post date:** [November 21, 2023, 7:03pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/15 "2023-11-21T19:03:40Z")

</div>

This can now be controlled via RBAC since v4.1.0.

Checkout this [blog article](https://www.passbolt.com/blog/introducing-rbac) for an overview of the feature.

---

<div class="post-metadata">

**Author:** ![Yan](https://avatars.discourse-cdn.com/v4/letter/y/3e96dc/32.png) [@Yan](https://community.passbolt.com/u/Yan)\
**Post date:** [November 23, 2023, 7:25am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/16 "2023-11-23T07:25:47Z")

</div>

Hi there,

Thanks you for this. I’m going to plan it asap. Cool! ![](data:image/gif;base64,R0lGODlhEgASANQVAAsJBZF6DszMy+HJE4aGhFxWFNzSPLOYFe7u7b6pTjo4FvXYFL64ntG/I1tbV+vpWSMhGt7TMb+mLC8vLN3b1fr6+vzoICYKAsm/YvjuQfz5X3pgCqSMC8GoFhcVDQAAACH5BAEAAB8ALAAAAAASABIAAAXf4CeKVWmWY0pSycFxR0JVKokd0aNpT3RgtBRC0tlljpldR4IYVVoYQ6RxnBpuCRoBAlAUFABAoeDpfj0eAgFAcEzeEwWYQXg7AA4BZALxQPoSEX59ex4UFBsecn0BCwMcaHIeBQgUHD0NAwMLjpoDHQMPBwgIBw8Wj5yqCxybGR2kCREZCwEbm44bjRkRCQgVDEUWCxsXxhcbCxYaHQwlCAkNGhYWHQEBHdQaDb40FQISDQ8Z1NQZDw0SAkEfCAIJHbNGER0JAk0pFRQMCURLCQxm1PhQoZKAgwIo/EoRAgA7)

![signature.PNG](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/8/80d17153f2744d799aa35d38f869eb74d937777c.png)

---

<div class="post-metadata">

**Author:** ![bluecrow76](https://avatars.discourse-cdn.com/v4/letter/b/b19c9b/32.png) [@bluecrow76](https://community.passbolt.com/u/bluecrow76)\
**Post date:** [December 20, 2023, 8:47pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/17 "2023-12-20T20:47:02Z")

</div>

Good day!

I’m poking sticks at passbolt to see what its all about. In the RBAC settings, I set “Can see users workspace” for User to “Deny”. “Users” no longer have “users” as an option in the menu, but if you add “/app/users” to the URL the “Users” page displays normally for users even though they’re not supposed to have access. It appears that this toggle doesn’t actually have an actual permissions enforcement but is simply a UI tweak of removing a menu item.

I’m running 4.4.2 on an Ubuntu 22.04 server.

Is this expected behavior as of version 4.4.2 or have I inadvertently done something horribly wrong?

Thanks!

---

<div class="post-metadata">

**Author:** ![ishan](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/ishan/32/1583_2.png) [@ishan](https://community.passbolt.com/u/ishan)\
**Post date:** [December 21, 2023, 10:18am UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/18 "2023-12-21T10:18:46Z")

</div>

Hey @bluecrow76,

This is expected. For initial version of RBAC, we just hide UI actions. In upcoming versions we will improve it to add more permission checks in API side also.

---

<div class="post-metadata">

**Author:** ![cedric](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/cedric/32/3868_2.png) [@cedric](https://community.passbolt.com/u/cedric)\
**Post date:** [December 23, 2023, 9:09pm UTC](https://community.passbolt.com/t/as-an-admin-i-do-not-want-my-users-to-see-all-users-on-the-platform/1151/19 "2023-12-23T21:09:09Z")

</div>


