Credentials. Admin access controls every user's chats and connected API keys; protect the admin account.
Who it is forA small company that wants one internal AI chat with access control.
The problemEveryone using their own personal AI accounts means no control and duplicated cost.
The outcomeOne shared instance with user groups, per-group model access and custom agents.
What you need first
- Docker, or Python with pip
- Ollama for local models, or an OpenAI-compatible API key
- A GPU is optional (the :cuda image uses it)
Steps
- Deploy with Docker or Kubernetes on a team server
- Use PostgreSQL instead of SQLite for a larger team
- Create user groups and roles with granular RBAC
- Build custom models and agents with instructions, tools and knowledge, and limit them per group
Prompt for your agent
Plan an open-webui/open-webui deployment for <n> people on <server>: storage choice, groups and roles for <teams>, and which models each group gets. Then give me the Docker command.
Caveat.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for open-webui/open-webui and "Share one AI workspace with your team, with roles and groups"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer