Overview
As a regular user (non-admin), you can:- Request new VPN resources (IPs, subnets, domains)
- View your requested and approved resources
- Edit your own resources
- Check the status of pending requests
- Receive email notifications about request decisions
Admin users (configured via
NETBIRD_ADMIN_EMAIL) have additional capabilities. See the Admin Guide for admin-specific features.Getting Started
Signing In
Navigate to the Portal
Open your web browser and navigate to your organization’s NetBird Selfservice portal URL.
Click Sign In
Click the “Sign in with Google” button (or your organization’s configured OAuth provider).
Authenticate
You’ll be redirected to Google’s login page:
- Enter your work email address
- Complete the authentication process
- Grant permission if prompted (first time only)
Requesting New Resources
When you need to access a customer’s network or external resource through the VPN:Fill in Resource Details
Complete the resource request form:Resource Name (Required)
- A descriptive name for the resource
- Example: “Acme Corp Database” or “Client XYZ Web Server”
- The IP address, CIDR range, or domain name
- Supported formats:
- Single IP:
192.168.1.100 - CIDR range:
10.0.0.0/24 - Domain:
database.example.com
- Single IP:
- Additional details about the resource
- Purpose, customer name, project information
- Example: “MySQL database for Acme Corp project, port 3306”
- Keep checked to enable the resource immediately upon approval
- Uncheck if you want to create but not activate yet
Submit Request
Click “Submit Request” or “Create”.Your request will be sent to the administrator for approval.
Validation Rules
The system validates resource addresses to ensure network security:Allowed Address Formats
Allowed Address Formats
Single IP AddressesCIDR RangesDomain Names
Blocked Addresses (Security)
Blocked Addresses (Security)
These address ranges are blocked for security reasons:
0.0.0.0/0- Catch-all route0.0.0.0/8- Current network127.0.0.0/8- Loopback addresses169.254.0.0/16- Link-local addresses224.0.0.0/4- Multicast240.0.0.0/4- Reserved255.255.255.255/32- Broadcast- IPv6 equivalents (
::/128,::1/128, etc.)
Private network ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) are allowed for accessing customer resources.
Domain Name Requirements
Domain Name Requirements
Valid domain names must:
- Contain at least one period (
.) - Use valid characters (letters, numbers, hyphens, periods)
- Not start or end with a hyphen
- Have valid TLD (top-level domain)
- ✅
api.customer.com - ✅
db-primary.example.net - ❌
localhost(no period) - ❌
-invalid.com(starts with hyphen)
Understanding Request Status
Your resources can have different statuses:| Status | Description | Actions Available |
|---|---|---|
| Pending | Waiting for admin approval | View details, Cancel request |
| Approved | Approved and active in VPN | View, Edit, Delete |
| Denied | Rejected by admin | View details only |
Once a resource is Approved, it’s automatically added to the VPN network and accessible through your NetBird client.
Viewing Your Resources
Resources Dashboard
The main dashboard displays all your resources:- Active Resources: Approved resources currently in the VPN
- Pending Requests: Resources awaiting approval
- Request History: Previously denied or cancelled requests
Resource Details
Click on any resource to view:- Resource name and address
- Description and purpose
- Status (enabled/disabled)
- Request date and approval date
- Who created the resource
Managing Your Resources
Editing Owned Resources
You can edit resources you’ve created (once approved):Modify Details
Update any of the following:
- Resource name
- Address (IP, CIDR, or domain)
- Description
- Enabled status
Deleting Resources
When you no longer need a resource:Enabling/Disabling Resources
Temporarily disable a resource without deleting it:- Click on the resource
- Toggle the “Enabled” switch
- Disabled resources remain in the system but are not accessible through the VPN
Email Notifications
You’ll receive email notifications for:Request Submitted
When you create a new resource request:- Confirmation that your request was received
- Expected approval timeline
- Request details summary
Request Approved
When an admin approves your request:- Notification of approval
- Resource details (name, address)
- Information about accessing the resource
- Next steps for connecting
Request Denied
If your request is rejected:- Notification of denial
- Possible reasons (if provided)
- Instructions for resubmitting with corrections
Email notifications are sent to the email address you used to sign in.
Best Practices
Requesting Resources
Requesting Resources
Be Descriptive
- Use clear, meaningful names
- Include customer/project name
- Specify the purpose
- Add detailed descriptions
- Mention related projects or tickets
- Include contact information if needed
- Request resources before you need them
- Allow time for admin approval
- Test connectivity after approval
Resource Maintenance
Resource Maintenance
Regular Cleanup
- Delete resources you no longer need
- Disable temporary resources instead of leaving them active
- Review your resources monthly
- Update descriptions when projects change
- Modify addresses if infrastructure changes
- Reflect the current state in resource details
- Only request resources you actually need
- Use the most specific address possible (prefer single IPs over broad ranges)
- Remove access when projects end
Troubleshooting Access Issues
Troubleshooting Access Issues
If you can’t access an approved resource:
-
Check NetBird Client
- Ensure NetBird client is running
- Verify you’re connected to the VPN
- Check client status and logs
-
Verify Resource Status
- Confirm resource is “Approved”
- Check if resource is enabled
- Review the resource address
-
Test Connectivity
-
Contact Support
- If issues persist, contact your admin
- Provide resource name and error details
- Include NetBird client logs if available
Frequently Asked Questions
How long does approval take?
How long does approval take?
Approval times vary by organization:
- Some admins approve requests within minutes
- Others may have scheduled review periods
- Check with your admin for expected timelines
Can I request multiple resources at once?
Can I request multiple resources at once?
Currently, you need to submit separate requests for each resource. However, you can:
- Submit multiple requests in succession
- Use CIDR notation to cover ranges (e.g.,
10.0.0.0/24) - Contact your admin for bulk resource additions
What if I enter the wrong address?
What if I enter the wrong address?
If your request hasn’t been approved yet:
- Cancel the pending request
- Submit a new request with the correct address
- Edit the resource and update the address
- Changes take effect immediately
Can I see other users' resources?
Can I see other users' resources?
No, regular users can only see:
- Resources they’ve created
- Their own pending requests
What happens when I leave the company?
What happens when I leave the company?
When your account is deactivated:
- You lose access to the portal
- Your resources remain in the system
- Admins can reassign or remove your resources
Getting Help
If you need assistance:- Check this documentation - Most common questions are answered here
- Contact your admin - Email address: check your approval notification emails
- IT Support - For NetBird client or network connectivity issues
- Security Team - For questions about allowed resources or policies
Next Steps
- Admin Guide - Learn about admin capabilities (if you’re an admin)
- OAuth Setup - Understanding authentication
- NetBird Setup - Technical configuration details