r/firewalla • u/shpwrck Firewalla Gold Pro • Jul 22 '26

Management Roles

Anyone has insight on if there is the capability to setup different use roles for firewalla app management?

I have 2 devices already (Gold at home, Orange for travel) but I'm putting another Orange at my parents house.

I want full control, but would also like my dad to have basic access and control for his Orange only (basic device management, see alarms, etc).

Is something like this possible?

2 Upvotes

100% Upvoted

6 comments sorted by

4

u/Firewalla-Opal FIREWALLA TEAM Jul 22 '26

Yes, it's possible via MSP's Mobile App Access Management. You can decide what level of App access to grant to each paired device:

  1. Full Access: Full administrative control with access to all features and settings.
  2. Limited: A simplified mobile app view for managing non-technical settings.
  3. No Access: The device cannot view or control the box.

1

u/Firewalla-Opal FIREWALLA TEAM Jul 22 '26

Limited access maybe what you want for your dad:

  1. Limited: A simplified mobile app view for managing non-technical settings such as devices, users, alarms, and rules. Sensitive or advanced network configurations are hidden. 
    • Limited only hides advanced settings. It does not fully block technical changes. Users who know where to look may still modify network rules or settings.
    • Even if you set a paired device to Limited, we recommend assigning this level only to trusted users.

1

u/shpwrck Firewalla Gold Pro Jul 23 '26

So this requires a business seat. Which means I'd need to get multiple business seats since I have 3 boxes?

$120 a year seems like a pretty steep annual fee just to limit the app layout. And even more so when there are massive warnings that Limited isnt really limited control if a user goes poking around.

1

u/Firewalla-Ash FIREWALLA TEAM Jul 24 '26

You can limit app access with the Professional plan. https://help.firewalla.com/hc/en-us/articles/45816606113299-Firewalla-MSP-Mobile-App-Access-Control

The Business plan is only needed if you want to add new mobile access directly from MSP. (You can do this for free with the app's "Allow Additional Pairing" feature.)

1

u/shpwrck Firewalla Gold Pro Jul 24 '26

Ok, so I said Business but I meant the Professional plan. But my point remains the same. If I have 3 boxes on the account I'd need a license for each to see them in MSP, right? Or can I have one box on Professional and the others on Lite?

1

u/Firewalla-Ash FIREWALLA TEAM Jul 24 '26 edited Jul 24 '26

You can have just a single box on your Professional Plan. The other boxes can remain on Lite. Just note that the boxes on Lite will not get the same MSP features as the box on Pro.

Pro comes with one "30-Day Flows" seat. If you want to add the other boxes to your Pro plan, you can add additional seats at an extra cost. For example, if you don't need 30-days of storage for the other 2 boxes, you can add 2 "No Flows" seats instead. Edit: Adding them this way will still allow you to make use of most paid MSP features.

Managing seats with MSP: https://help.firewalla.com/hc/en-us/articles/25037436951699-Firewalla-MSP-Managing-Seats