396.– CHF
Ubiquiti UniFi Dream Machine Pro
Question about UniFi Dream Machine Pro - 431434
Do I need a UI account to set up and operate the UDM Pro? Or can it also be set up locally like a USG 3P? Of course it can be advantageous to access and adjust the UDM Pro via cloud access (remote access). But for me, this access is a no-go for a router that should block attacks and access from outside and protect the network. All settings and passwords (even if encrypted) are stored in the cloud. In the event of a hack on Ubiquiti (which has already happened), these would be leaked. I was therefore surprised that the Ui account requirement was never mentioned or discussed here. After all, for me, that's the purchase decision. In the meantime, can you do the whole setup locally (for example, even without internet)?
Helpful answer
and the Unifi Account User can also be easily deactivated in the UDMP interface. I had just overlooked this.
So it would definitely be possible via the small diversions of the first login. It's been a few months since my setup, so I don't know how it was then, whether it was also possible to choose whether it had to be a cloud user account or a local one.
A short addendum to increase the security of the online Uifi account, two-factor authentication is possible with the Google Authenticator.
I have my UDMP set up with a Unifi account and do not want to change it just to answer the question. But there is one possibility. I could now log in locally via the IP and create a new user via ADD User, where I can choose which type it should be - Unifi Account or Local Access Only, a role can then be selected (Super Admin, Limited Admin, Member). As a precaution, I have now created a local Super
Admin and logged in with it. However, this Super Admin does not have the authorisation to deactivate the Unifi Account Admin (Ownder).Because that would be necessary to implement your task correctly. Perhaps this is possible in the online area.
I don't have much time at the moment, otherwise I would try out more. But I can test it again later.
REGARDS
I had to create a Unifi account with my UDMP. This is also used when logging into the local network.