# Multiple users requiring access to a single device

**URL:** <https://community.particle.io/t/multiple-users-requiring-access-to-a-single-device/55090>\
**Category:** Cloud\
**Created:** [March 9, 2020, 4:11pm UTC](https://community.particle.io/t/multiple-users-requiring-access-to-a-single-device/55090 "2020-03-09T16:11:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![btav](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/btav/32/15203_2.png) [@btav](https://community.particle.io/u/btav)\
**Post date:** [March 9, 2020, 4:11pm UTC](https://community.particle.io/t/multiple-users-requiring-access-to-a-single-device/55090/1 "2020-03-09T16:11:30Z")

</div>

Hi all,

I am working on a consumer IoT product and we’re using two-legged authentication architecture. We create customer accounts on our backend and accompanying Particle shadow customer accounts at the same time. When a user logins into our app we provide them with a Particle token and that is how they communicate with their device.

We want to implement a feature that allows multiple users to share a device. At the moment, the idea would be to share a single Particle Shadow customer account with multiple users. The issue with that approach is that all users would have the same privilege level because they are all using the same token. Ideally for our feature we would like to have a single product owner and other users would be considered guests.

I was hoping to get some insight in best practices for authentication for multiple users and device relationships.

---

<div class="post-metadata">

**Author:** ![marekparticle](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/marekparticle/32/22793_2.png) [@marekparticle](https://community.particle.io/u/marekparticle)\
**Post date:** [March 23, 2020, 1:40pm UTC](https://community.particle.io/t/multiple-users-requiring-access-to-a-single-device/55090/2 "2020-03-23T13:40:55Z")

</div>

Hi there, sorry for letting this ticket sit unanswered - we discussed this in detail in a support ticket. A summary is as follows:

> It should be possible to generate more than one access token per shadow customer. You can find more information about access token creation in a shadow customer context [here](https://github.com/rickkas7/particle_notes/tree/master/electron-shadow-customers). **However, as you suspect, this does not create any kind of hierarchy with respect to access.**

> If you are interested in a more deeply-tiered hierarchy of access, which I suspect you are, then you would likely need to proxy another level of abstracted authentication within your own system (you own infrastructure).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/particle/original/3X/6/4/64635adccc35238caa19e9b553ec3e98b163d026.png) [@system](https://community.particle.io/u/system)\
**Post date:** [September 22, 2020, 1:41am UTC](https://community.particle.io/t/multiple-users-requiring-access-to-a-single-device/55090/3 "2020-09-22T01:41:01Z")

</div>

This topic was automatically closed 182 days after the last reply. New replies are no longer allowed.