# Configure users for admin portal **URL:** \ **Category:** Feature Requests\ **Created:** [February 5, 2022, 2:55am UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430 "2022-02-05T02:55:42Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![gerardv514](https://avatars.discourse-cdn.com/v4/letter/g/439d5e/32.png) [@gerardv514](https://vaultwarden.discourse.group/u/gerardv514)\ **Post date:** [February 5, 2022, 2:55am UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/1 "2022-02-05T02:55:42Z")
Add the ability (if it doesn’t exist) to specify specific users in the environmental variables for the admin portal [adminSettings\_\_admins=john@example.com](mailto:adminSettings__admins=john@example.com) I’ve tried this variable however I could not get it to work, therefore I’m assuming the feature is not available in Vaultwarden. Source: [Admin portal users](https://bitwarden.com/help/admin-portal/#configure-users-for-the-admin-portal) ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [February 5, 2022, 7:44am UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/2 "2022-02-05T07:44:45Z")
Please read [https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page) Vaultwarden works in a different way ---
**Author:** ![gerardv514](https://avatars.discourse-cdn.com/v4/letter/g/439d5e/32.png) [@gerardv514](https://vaultwarden.discourse.group/u/gerardv514)\ **Post date:** [February 5, 2022, 2:38pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/3 "2022-02-05T14:38:17Z")
I have it already enabled with a token. So is there no way to further secure this page access? Whether it’s limiting the user name email or some sort of 2fa on this page? I feel like a token only is insecure or rather not enough. ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [February 5, 2022, 2:54pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/4 "2022-02-05T14:54:38Z")
It is something on the todo-list somewhere, but nobody has had a real interest into adding it. You can always add a `Basic Auth` in-front of it as some proxy examples show, that is what i do my self. Also, the configuration from Bitwarden isn’t even linked to the users in the database, it is totally separated. The reason we do not have the same is because Vaultwarden allows to be run without a mail server setup, which isn’t working for Bitwarden if you want to access the admin interface. That is why Vaultwarden doesn’t have this mandatory. Though, i’m still wanting to add a bit more protection to it, i just haven’t come around to start on it my self. ---
**Author:** ![gerardv514](https://avatars.discourse-cdn.com/v4/letter/g/439d5e/32.png) [@gerardv514](https://vaultwarden.discourse.group/u/gerardv514)\ **Post date:** [February 5, 2022, 5:03pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/5 "2022-02-05T17:03:30Z")
> [@BlackDex](#): > > You can always add a `Basic Auth` in-front of it as some proxy examples show, that is what i do my self. Is there any good guides out there on how to do something like this? ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [February 5, 2022, 5:15pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/6 "2022-02-05T17:15:27Z")
@gerardv514 Which reverse proxy are you using? ---
**Author:** ![gerardv514](https://avatars.discourse-cdn.com/v4/letter/g/439d5e/32.png) [@gerardv514](https://vaultwarden.discourse.group/u/gerardv514)\ **Post date:** [February 5, 2022, 5:26pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/7 "2022-02-05T17:26:40Z")
I’m using a synology nas, and using the native reverse proxy. ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [February 5, 2022, 5:37pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/8 "2022-02-05T17:37:37Z")
No idea what they use sorry. ---
**Author:** ![gerardv514](https://avatars.discourse-cdn.com/v4/letter/g/439d5e/32.png) [@gerardv514](https://vaultwarden.discourse.group/u/gerardv514)\ **Post date:** [February 5, 2022, 6:14pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/9 "2022-02-05T18:14:45Z")
I have been messing around with an opnsense router. I still haven’t flipped over to it yet. One of the things I was thinking about was moving the reverse proxy to that once I learned how to. ---
**Author:** ![cksapp](https://avatars.discourse-cdn.com/v4/letter/c/b9e5f3/32.png) [@cksapp](https://vaultwarden.discourse.group/u/cksapp)\ **Post date:** [February 5, 2022, 11:55pm UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/10 "2022-02-05T23:55:12Z")
Pretty decent general guide for lots of self-hosted things. I happen to follow the guy on YT, pretty informative. Hopefully that helps. [![](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/2X/1/1710353a993c491f9e6411ef8e648e96d4a2243e.jpeg "2 Factor Auth and Single Sign On with Authelia") ](https://www.youtube.com/watch?v=u6H-Qwf4nZA) ---
**Author:** ![kevdog](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/kevdog/32/168_2.png) [@kevdog](https://vaultwarden.discourse.group/u/kevdog)\ **Post date:** [February 6, 2022, 7:44am UTC](https://vaultwarden.discourse.group/t/configure-users-for-admin-portal/1430/11 "2022-02-06T07:44:50Z")
For admin portal - I’m using nginx as my reverse proxy and implemented Authelia as the front end which controls access and use of 2FA to access site. It didn’t take too long to do. I’d probably use traefik as my reverse proxy if I were going to do it all over again however nginx is working OK for me.