Giving Parents access to kid-control only?

RouterOS General
1

I set up kid-control for a client, but now want to give the parents the select option to configure/change schedules or temporarily enable/disable kids access, preferably through the Mikrotik app from their phone. However, I do NOT want to give them full admin access to prevent misconfigurations (or them to access/change anything which they shouldn’t need to touch).

I want to make a dedicated user&group, but I can’t find a way to limit access to kid-control section only? How would I go about this?

Any help appreciated!

2

You can make dedicated skin for webfig…

3

Thanks. I didn’t know about skins before (especially since the button isn’t even available through Winbox), but I was quickly able to make a skin suiting my needs (based on what I see in the browser…have not checked the App yet).

However now I ran into the following issue, another user was already reporting in the forum some time ago:
http://forum.mikrotik.com/t/solved-port-mapping-webpage/146027/1

Doesn’t look like this was already solved?

Also, for the users group, I have assigned the following permissions:
reboot, read, write, winbox, password, web
Is this correct? Or am I able to remove anything further? Eg…I assuming I need them to have “read” and “write” permissions, “Winbox” permissions for the phone app, “Web” for Webaccess, “password” for them to change the password.

Btw.: Using RouterOS 7.5

4

The user must not have “tikapp” (or the name used on v7), but only read, write, web, winbox, or it gain unlimited access to the config with “tikapp”

5

With portable devices defaulting to “Use Private MAC Address”…

Kid control becomes pretty easy to beat.

6

why not give permissions that allow login but not really to change anything
Then write some scripts that can read logins and

for bob1 → cuts internet access for 8 hours
for bob2–> restores internet to current settings
etc…

7

And defeated…
Screenshot_20221009-104741.png