# Zrok cmd for clients

**URL:** <https://openziti.discourse.group/t/zrok-cmd-for-clients/2350>\
**Category:** zrok\
**Created:** [March 26, 2024, 7:56pm UTC](https://openziti.discourse.group/t/zrok-cmd-for-clients/2350 "2024-03-26T19:56:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mbenachour](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/mbenachour/32/1921_2.png) [@mbenachour](https://openziti.discourse.group/u/mbenachour)\
**Post date:** [March 26, 2024, 7:56pm UTC](https://openziti.discourse.group/t/zrok-cmd-for-clients/2350/1 "2024-03-26T19:56:35Z")

</div>

Hi,  
I like the selfhosted setup, it gives a lot of flexibility to the admins, but one use case i'm concerned about is : if one was to allow internet users to enable their workstations as environments, so they can share their http projects, the zrok command line gives the end users a lot of power , like "zrok overview" which will list all the envs attached the slefhosted instance.  
am I using the product wrong, or is there an architecture design I should be aware of ?

thanks

---

<div class="post-metadata">

**Author:** ![michael.quigley](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/michael.quigley/32/1123_2.png) [@michael.quigley](https://openziti.discourse.group/u/michael.quigley)\
**Post date:** [March 26, 2024, 7:59pm UTC](https://openziti.discourse.group/t/zrok-cmd-for-clients/2350/2 "2024-03-26T19:59:35Z")

</div>

> [@mbenachour](#):
>
> the zrok command line gives the end users a lot of power , like "zrok overview" which will list all the envs attached the slefhosted instance.

`zrok overview` only allows users to list resources their account owns, not for the entire instance.

---

<div class="post-metadata">

**Author:** ![mbenachour](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/mbenachour/32/1921_2.png) [@mbenachour](https://openziti.discourse.group/u/mbenachour)\
**Post date:** [March 26, 2024, 8:15pm UTC](https://openziti.discourse.group/t/zrok-cmd-for-clients/2350/3 "2024-03-26T20:15:40Z")

</div>

I see, do you have any architecture suggestions if I wanted to open my selfhosted zrok instance to my user base ( for my website ) , the idea is for my users to be able to create public shares for their local apps.

---

<div class="post-metadata">

**Author:** ![michael.quigley](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/michael.quigley/32/1123_2.png) [@michael.quigley](https://openziti.discourse.group/u/michael.quigley)\
**Post date:** [March 26, 2024, 8:18pm UTC](https://openziti.discourse.group/t/zrok-cmd-for-clients/2350/4 "2024-03-26T20:18:42Z")

</div>

We run the same code for [zrok.io](http://zrok.io) that you can run in your self-hosted environment. zrok is already set up out of the box to allow users to create accounts using `zrok invite`, and then enable environments for sharing using `zrok enable`. All of these things were designed to work in a multi-tenant environment.

As long as you're allowing them to create their own accounts, not trying to share one account amongst many users, then zrok will work just fine in your environment.