So I just learned that apparently Home Assistant has absolutely no user account control. My roommate has no need to access the lights, electrical outlets, etc. in my room, and has absolutely no reason to be able to see my phone’s battery charge level and charger status.
It’s a feature that’s often been requested, but hasn’t appeared yet. The best option out of the box is creating non-Administrator users and then creating custom dashboards and panes per user with only the controls they need.
But that doesn’t stop a user from poking around still, because they can still access all devices and entities through features like the Logbook - which is always accessible because sidebar items can’t be controller per user.
There are some HACS bits that might be able to lock things down a bit further, like Kiosk and Guest modes.
I’ve heard some people get round this by setting up inebriations with Apple/Google/Amazon ecosystem, only exposing the desired entities/devices, and then giving others access to those and keeping them out of Home Assistant altogether.
It’s a feature set I wish they would add/expand, I’m sure anyone with a home office and mischievous children would agree.