There are four types of Domain roles with the default rights in the system (see Role types ).
Attention!
By default, the created role won’t have access to Axxon One functionality.
By default, the Customer-Admin and Customer-Operator domain roles don’t have access to cameras in the Web-Client, settings of the Web-configurator, and archive. To have the corresponding rights, you need to contact a user with the Admin or Tech-Support rights.
Creating a role
To create a new domain role, do the following:
Click the button in the upper right corner.
Enter the role name, a comment if necessary, and click the CREATE button.
Creating a new domain role is complete. The new role will be added to Axxon One and will be displayed in the list of available domain roles in the Web-configurator.
Setting up a role
To set up a role, do the following:
Go to the ROLES tab and click the required role in the list. The role editing menu will be displayed on the right side of the screen.
To select the functionality, click the button and select the required setting from the list.
Depending on the selected setting, select the access right from the drop-down list or specify a value. To pin the list of the selected access rights, click the button. To unpin it, click the button. To delete a setting from the list, select the required setting and click the button. The list of settings, access rights and their description are presented in the table:
Setting
Access rights
Description
Comment
—
Specify additional information about users in this role, if necessary
Time schedule
—
If users in this role must be granted the specified access rights only during a certain period of time, select a time schedule from the list. Outside of the selected time schedule, users in this role won’t have the rights
Authorization supervisor
—
If login of users in this role must be confirmed by the Admin, select the corresponding role from the list
Export supervisor
—
If the start of export for users in this role must be confirmed by the Admin, select the corresponding role from the list
Unrestricted access
Access denied
Access to system functions is set manually
Yes
All system functions are available
Access to alarms
Access denied
No access to viewing alarm events
View only
View alarm events without assessment
Full
View and assess alarm events
Access to bookmarks
Access denied
No access to adding comments to the archive
Create
Add comments to the archive
Create/Protect
Add comments to the archive and create protected records
Create/Protect/Edit and delete
Add comments to the archive, create and edit protected records
Access denied
If you select Device rights only, users in this role will only be able to change the access rights for connected devices in the role settings
Device rights only
Full
Access to default camera
Access unspecified
Access rights are set manually
Access denied
No access to device
Archive only
Only archive viewing is available
Live in armed mode
Viewing the video image from the camera is available only when the camera is armed
Live
Viewing the live video image from the camera is available. Other functions and device configuration aren’t available
Live/Archive
Viewing the live video image from the camera and in the archive is available. Camera arming/disarming and its configuration aren’t available
Live/Archive/Control
All functions are available. Device configuration isn’t available
Access full
All functions are available
Access to default microphone
Access denied
Users in this role cannot listen to live audio from the camera, listen to audio in the archive, record audio to an exported file
Access monitoring
Listening to live audio from the camera is available (microphone must be on). Listening to audio in the archive isn’t available
Access full
All functions are available
No access
Users in this role cannot control PTZ device
Lowest
Users in this role can control PTZ device with the corresponding priority
Low
Normal
High
Highest
Access to default archive
Access denied
Access to the archive isn’t available
Full
Archive is available for any functions
Access to default videowall
Access denied
Access to control monitors of the connected Clients when setting permissions for each Server in the domain. A user who has monitor control rights of a Server, can control the monitors of any Client connected to that Server
Full
—
Specify in hours, what interval from the end of the archive can be viewed by users
Macros access
Access denied
No access to macros
Access full
Full access to macros
Access to settings
Select all
Select access rights to the tabs of the Settings interface and to enable the Check in lists parameter
Attention!
If the Programming setup isn’t available to a user in this role, they won’t be able to use the macros they created until the corresponding rights are granted
Device setup
Archive setup
Detection setup
Options setup
Programming setup
Check in lists
Access to functions
Select all
Users in this role will have access to all functions
Layouts editing
Edit layouts
Export
Export frames and video recordings
Layouts tab
Right to access interfaces
Minimize to taskbar
Minimize the Client to tray
System log
View the system log
Domain control
Domain control
Adding camera to layout in monitoring mode
Add a video camera to a layout in the live mode
Access to search in archive mode
Search in the archive
Adding/Editing presets
Add and edit presets for PTZ cameras
Permission to access via WEBUI
Access to the Web-Server
Unlock camera menu button
Camera context menu
Show captions
Show captions
Show error messages
Display messages about system errors that are displayed in real time in the Layouts interface. Critical system error messages, such as "Insufficient network bandwidth", are displayed regardless of the setting of the Show error messages parameter
Allow to delete records
Delete video recordings from the archive
View masked video
Display masked video
Show faces
Show faces
Allow unprotected export
Export frames and video recordings without password protection. If there is no permission, setting a password when exporting will be mandatory
Group panel
Access rights to camera groups in the Hardware tab and to camera groups in the layout interface
Object panel and camera search panel
Access to the object panel and camera search panel
Confidential bookmarks
Add and view confidential comments
Access to maps
Access denied
Users don’t have access to view maps
View only
Users can only view maps
View/move/scale
Users can view maps, change their scale, and move them
Full
All operations with map is available
Access to ACFA
Access denied
Users don’t have access to ACFA
View only
Users can only view
View and manage
Users can view and manage
View, manage, configure
Users can view, manage, and configure ACFA
Configure group rights if you have a Site (see Creating a Site) on the GROUP CAMERAS ACCESS tab.
Hardware
Access level
Description
Camera group
Inherited (Access full)
Access rights are inherited from the SETTINGS tab Access to default camera
Access denied
No access to device
Archive only
Only archive viewing is available
Live in armed mode
Viewing the video image from the camera is available only when the camera is armed
Live
Viewing the live video image from the camera is available. Other functions and device configuration aren’t available
Live/Archive
Viewing the live video image from the camera and in the archive is available. Camera arming/disarming and its configuration aren’t available
Live/Archive/Control
All functions are available. Device configuration isn’t available
Access full
All functions and device configuration are available
To save the settings, click the button. To cancel changes, click the button.
Setting up a role is complete. To change access rights, select a role, select the required value from the list of available rights and apply the settings.
Removing a role
To remove a role, do the following:
Go to the ROLES tab and set the checkbox next to the required role.
In the lower right corner, click the button. In the window that opens, click the YES button to remove a role. To cancel the removal, click the NO button.