General information
Each role has different access settings for users. To configure a cloud role, go to the System settings tab→ Cloud roles.
Creating and configuring a role
To create a role, do the following:
- Click the Add a new role button.
- In the Name field, enter the name of the role.
- Set the checkbox next to the required access permission. You can apply the following permissions to cloud roles:
- User management
Permission Description Cloud permission: Assign
Allows you to move users into groups. Without this permission, you can't change groups of users
Domain policies: Edit
Allows you to edit domain policies. Without this permission, you can't edit domain policies and users
Cloud permission: Edit Users
Allows you to create and delete users in the User permissions tab → Users. Without this permission, the Create user button isn't displayed, and you can't create/delete users
Attention!
You cannot disable this permission for users with the Administrator role.
Domain roles: Manage Allows you to manage domain roles (assign, edit, delete, and so on). Without this permission, you can't manage domain roles
Attention!
You cannot disable this permission for users with the Administrator role.
Cloud Permissions: Manage Allows you to manage cloud permissions. Without this permission, you can't manage cloud permissions
Attention!
You cannot disable this permission for users with the Administrator role.
Users group: Manage Allows you to manage groups of users, including moving users between groups. Without this permission, you can't move users between groups
Domain policies: View Allows you to view domain policies. Without this permission, only the domain of the user's account is available to the user; other domain policies aren't displayed View Users Allows you to view a user list in the cloud. Without this permission, the Users tab in the User permissions section is inactive, and you can't access the user list - Access to functions
Permission Description Change password Allows you to change the user password and displays the Authentication section in the user settings. Without this permission, you can't change the password Dashboards: Create Allows you to create dashboards. Without this permission, you cannot create dashboards. When you try to create a dashboard, you are redirected to the Dashboards tab Dashboards: Edit Allows you to edit the created dashboards. Without this permission, the Edit button (the pencil icon) isn't displayed, and you can't edit the created dashboards Edit Dashboards in Marketplace Allows you to change the settings of the dashboards in the marketplace (name, data, schedule, and so on)
Manage Face lists Allows you to manage face lists that the user creates. Without this permission, you can't create and edit face lists Manage LP lists Allows you to manage LP lists that the user creates. Without this permission, you can't create and edit LP lists
Monitoring: Edit Allows you to edit the Monitoring microservice: add new widgets to a dashboard, delete, rename, change color, size, and so on Dashboards: Export Allows you to export dashboards. Without this permission, you can't export dashboards Dashboards: Import Allows you to import dashboards. Without this permission, you can't import dashboards Manage all Face lists Allows you to manage face lists of users (creating, editing, removing). Without this permission, the Faces tab isn't displayed
Manage all LP lists Allows you to manage LP lists of users (creating, editing, removing). Without this permission, the LPs tab isn't displayed LDAP sources: Manage
Allows you to manage LDAP catalogs License key: Manage
Allows you to manage license keys Streaming: Manage Allows you to use the streaming function and get the streaming address in the Devices tab → Streaming. Without this permission, the Streaming parameter isn't available Run mini configurator Allows you to use mini configurator Dashboards: Share
Allows you to share a link to the dashboard. Without this permission, the Share button isn't available Update quota for manual export Allows you to change the quota for uploading files Video export from web-client to the cloud Allows you to export video to the cloud. If you disable this permission, the corresponding interface elements are hidden View classifier Displays the Classifier tab. Without this permission, the Classifier isn't displayed View Dashboards Allows you to view dashboards. Without this permission, the Dashboards tab isn't displayed View Dashboards in Marketplace Allows you to view dashboards in the marketplace. Without this permission, dashboards in the marketplace aren't displayed in the Dashboards tab
View diagnostics Allows you to view diagnostics of the system Access to FULL audit Allows you to view the full audit. Without this permission, you can't view the full audit Monitoring: View Allows you to display the Monitoring microservice in the sidebar of dashboards. Without this permission, the Monitoring microservice isn't displayed in the sidebar
View Reports Allows you to view and edit reports. Without this permission, the Reports tab isn't displayed View User Rights Allows you to view user rights. Without this permission, you can't view user rights - System setup
Permission Description Create Axxon PSIM domains Allows you to create an Axxon PSIM domain. Without this permission, the Create Axxon PSIM domains button isn't displayed when you want to create a domain Create cloud domains Allows you to create cloud domains with the necessary parameters. Once you create a domain, you can add devices to it. Without this permission, the Create AxxonNet domains button isn't displayed when you want to create a domain Connect remote domains Allows you to bind a domain by token. Without this permission, the Bind button isn't displayed when you want to create a domain Manage Cloud Camera and Axxon Bridge Allows you to manage cloud cameras and Axxon Bridge (add, rename, delete, and so on). Without this permission, you can't manage cloud cameras Update upload quota Allows you to edit the quota for uploading files. The quota is fixed for manual export. If the quota expires, you cannot upload files. When you delete files, disk space is freed up. When the administrator increases the quota, the upload becomes available. Without this permission, you can't edit the quota - Backup
Permission Description Backup: Download Allows you to download backups. Without this permission, you cannot download backups Backup: Restore Allows you to restore backups. Without this permission, you cannot restore backups Backup: Edit schedule Allows you to edit the schedule for backups. Without this permission, you cannot edit the backup schedule Backup: Manage Allows you to manage backups. Without this permission, you cannot manage backup settings
- User management
- Click the APPLY button to save the changes.
Creation and configuration of the cloud role is complete.
Editing a role
To edit a role, do the following:
- Click the Edit button next to the required role.
- Change the settings or the name of the role.
- Click the APPLY button.
Role editing is complete.
Ranking roles
The ranking system allows you to determine which roles users can assign to each other at the registration. The higher the ranking, the more features a user gets. To increase the rank of a role, click the Move rank up button. To decrease the rank, click the Move rank down button.
Disabling a role
To disable a role, do the following:
- Click the Disable button next to the required role.
- In the window that opens, click the Yes button.
As a result, the role is disabled.
Restoring a role
To restore a role, do the following:
- Click the Restore button.
- In the window that opens, click the Yes button.
As a result, the role is restored.
Deleting a role
Attention!
We recommend assigning new roles to users before you delete a role. Otherwise, all users are assigned the default Operator role.
To delete a role, do the following:
- Click the Disable button next to the required role.
- In the window that opens, click the Yes button.
- Click the Delete button.
- In the window that opens, click the Yes button.
As a result, the selected role is deleted.