Skip to content

💡 [REQUEST] - Add Multi-Level Admin Roles (Sudo & Non-Sudo Admin) #239

@YrustPd

Description

@YrustPd

Reference Issues

Hello Remnawave team,

I would like to request a new feature regarding multi-level administrator roles in the Remnawave Panel.

Currently, the panel supports a single super-admin account, which has full access to all settings, nodes, users, and critical configurations. However, many panel owners (including myself) need the ability to create additional administrators with limited permissions.

Why this feature is needed

There are many real-world use cases where a panel owner wants to allow someone to help with daily tasks but without giving them full control over the entire system. Examples include:

  • Allowing an admin to manage only users (create, edit, disable, delete)
  • Allowing an admin to view statistics without access to system settings
  • Allowing an admin to manage nodes but not panel configurations
  • Preventing an admin from changing critical settings or deleting other admins

Requested Roles

I propose adding two admin levels:

  1. Sudo Admin

    • Full access (same as current Superadmin)
    • Can create/delete other admins
    • Can modify all system settings
  2. Non-Sudo Admin (Limited Admin)

    • Can manage users
    • Can manage subscriptions
    • Can view nodes and analytics
    • Cannot access panel settings
    • Cannot create/delete admins
    • Cannot change system configuration

Suggested Implementation

  • Add role field for admins (e.g., SUPERADMIN, ADMIN)
  • Allow creating admins via panel UI or CLI
  • Add permission checks in backend routes
  • Add filtering of sensitive settings from the limited admin UI

Benefits

  • Increased security
  • Allows team-based management
  • Prevents accidents or misconfiguration
  • Aligns with best practices used in other management panels

This feature would be extremely helpful for many Remnawave users and would greatly improve panel usability and safety.

Thank you for considering this feature request.

Summary

Currently, the panel supports a single super-admin account, which has full access to all settings, nodes, users, and critical configurations. However, many panel owners (including myself) need the ability to create additional administrators with limited permissions.

Basic Example

for examples you can see the PasarGuard and Rebecca.

Drawbacks

...

Unresolved questions

Pasarguard

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions