Previous page Configuring cloud roles  Configuring LDAP Next page

On the page:

 

 

General information

To configure a domain role, go to the System settings tab→ Domain roles:

Creating and configuring a role

To create a role, do the following:

  1. Click the Add a new domain role button.
  2. In the Name field, enter the name of the role.

  3. Set the checkbox next to the required access permission. You can apply the following permissions to a domain role:
    1. System setup

      PermissionValueDescription
      Unrestricted access-Select if users of this role have unrestricted domain access
      Unspecified
      No
      Yes
      Access to default videowall-

      Select the default value for accessing the videowall

      Unspecified
      Access 
      denied
      Full 
      User rights setup access




      -

      Select the value of access rights

      Attention!

      When you select the Device access rights only value for the User rights setup access parameter, users of this role are only able to change access rights to connected devices in the role settings.

      Unspecified
      No
      Device access rights only
      Yes
      Devices setupAllows you to set up devices in a domain. Without this permission, device setup isn't available
      Archive setupAllows you to set up the archive: enable, disable, rename, delete, and so on. Without this permission, archive setup isn't available
      Detectors setupAllows you to set up detectors. Without this permission, detectors setup isn't available
      Settings setup

      Allows you to set up settings in a domain. Without this permission, domain settings setup isn't available

      Domain managing OPSAllows you to manage domain OPS: share it with other users, create, edit, delete, and so on. Without this permission, domain management isn't available
    2. Access to functions

      PermissionDescription
      View cameras

      Allows you to view cameras in the domain as the Operator user. Without this permission, the user can't view the cameras connected to the domain

      Can view face lists

      Allows you to view face lists. If you create a face list and bind it to the domain under the Administrator role and then go to the user page under the Operator role and disable this permission, the created list isn't displayed in the Faces tab

      Request restart arp clientThis permission allows you to send a request to restart the arp client from the cloud to Axxon One. Without this permission, you cannot send a request to restart the arp client from the cloud to Axxon One
      Can bind LP list to domain or domain groups

      Allows you to bind the LP list to the domain or domain groups. Without this permission, you cannot bind the LP list to the domain or domain groups

      Can view LP lists

      Allows you to view LP lists. If you create a LP list and bind it to the domain under the Administrator role and then go to the user page under the Operator role and disable this permission, the created list isn't displayed in the LPs tab

      Can bind face list to domain or domain groupsAllows you to bind the face list to the domain or domain groups. Without this permission, you cannot bind the face list to the domain or domain groups
      View arp client update status

      Allows you to view the arp client update status. Without this permission, you can't view the arp client update status

      Programming setupAllows you to manage macros in the Web-configurator. Without this permission, you can't manage macros in the Web-configurator
      WebUI login

      Allows you to log in to the web-client. Without this permission, you cannot log in to the web-client.

      Real time recognition setup

      Allows you to recognize faces and license plates in real time, comparing them to lists of faces and license plates

      Min/Max buttonsDisplays a button to minimize the Axxon One client to the taskbar (see Interface of Axxon One). Without this permission, the minimize button isn't available
    3. Devices

      PermissionValueDescription
      Change credentials

      Allows you to change the credentials of the device (camera, IP server, and so on). Without this permission, you cannot change the credentials of the device

      RenameAllows you to rename devices in the Devices tab. Without this permission, you cannot rename devices
      Unbind deviceAllows you to unbind devices from the domain in the Devices tab. Without this permission, you cannot unbind devices
      Download supportDisplays the Download support button in the Devices tab. Without this permission, you cannot download support
      Configure bridgeAllows you to configure Bridge: set settings, policies, and so on. Without this permission, you cannot manage Bridge
      Default camera accessSelect the default camera access
      -Access is unspecified
      Unspecified
      Access denied

      There is no access to the device

      Archive onlyOnly archive viewing is available

      Live in armed modeYou can view video only if the camera is armed
      Live

      You can view a live video from the camera. Other functions and device configuration aren't available

      Live/Archive

      You can view live video and archived video from the camera. You cannot arm/disarm and configure the camera

      Live/Archive/ControlAll features are available. Device configuration isn't available
      Access fullAll features are available, including device configuration
      Default mic accessSelect the default microphone access
      -Access is unspecified
      Unspecified
      Access denied

      Live audio isn't available:

      • from the camera;
      • in the archive.

      Audio recording to exported file isn't available

      Access monitoring

      Live audio from the camera is available (you must enable the microphone). Audio in the archive isn't available

      Access fullAll features are available
      Telemetry prioritySelect telemetry priority
      -Access is unspecified
      Unspecified
      HighestUser can control a PTZ camera with an appropriate priority (see Controling a PTZ camera)
      High
      Normal
      Low
      Lowest
      No access

      There is no access to control a PTZ camera

    4. Layouts

      PermissionValueDescription
      Alert accessSelect the access level to alert events
      -Alert access is unspecified
      Unspecified
      Access denied

      Users have no access to view alert events

      View onlyUsers can only view alert events but cannot assess them
      FullUsers can view alert events and assess them
      Maps access

      Select the access level to maps

      -Access is unspecified
      Unspecified
      Access deniedUsers have no access to view maps
      View onlyUsers can only view maps
      View/move/scaleUsers can view, scale, and move maps
      FullAll features are available
      Change layoutAllows you to change layouts. Without this permission, you cannot change layouts in Axxon One
      Layouts TabAllows you to work with layouts. Without this permission, you cannot manage layouts

      Add camera in layout in monitoring

      Allows you to add cameras to a layout. Without this permission, you cannot add cameras to a layout
      Access search

      Provides access to the archive search in the web-client. Without this permission, you cannot perform the search in the archive in the web-client

      Edit PTZ presetsAllows you to edit PTZ presets. Without this permission, you cannot edit PTZ presets
      Allow button Menu cameraDisplays the camera Menu button. Without this permission, the Menu button isn't displayed
      Allow show titles (captions)Allows you to view titles from the source of events on the video. Without this permission, the titles display isn't available

      Group panel

      Allows you to view the group panel. Without this permission, you cannot view the group panel

      Object panel and camera search panel

      Allows you to display the object panel and the camera search panel. Without this permission, you cannot view the object panel and the camera search panel

    5. Archive and export

      PermissionValueDescription
      Video export from web-client to the cloudAllows you to export video from the web-client to AxxonNet. Without this permission, export isn't available
      BookmarkAccessSelect access to create bookmarks in the archive
      -Access is unspecified
      Unspecified
      Access denied

      You cannot create bookmarks

      CreateYou can add bookmarks to the archive
      Create/protectYou can add bookmarks to the archive and create protected records
      Create/protect/edit and deleteYou can add bookmarks to the archive, as well as create and edit protected records
      Default archive accessSelect the default archive access
      -Access is unspecified
      Unspecified
      Access denied

      You cannot access this archive

      Full

      Archive is available for any operations

      Access exportAllows you to export. Without this permission, you cannot export video from the web-client
      Allow delete recordsAllows you to delete records
    6. Privacy

      PermissionDescription
      Access System Journal

      Allows you to access the system journal. Without this permission, you cannot view the events of the system journal

      Show error messages

      Shows error messages. Without this permission, error messages aren't displayed

      Attention!

      • Critical error messages in the system are displayed regardless of the Show error messages parameter. Critical errors include:
            • geomap connection error;
            • export error;
            • domain disconnection error;
            • insufficient network bandwidth error that is disabled by default. If necessary, you can enable it by adding the SHOW_INSUFFICIENT_BANDWIDTH_WARNING system variable with the TRUE value (see Appendix 9. Creating system variable).
      Show privacy video in archive

      Allows you to view privacy video in the archive. Without this permission, privacy videos aren't displayed in the archive

      Show faces in LiveAllows you to mask faces when viewing live video. Without this permission, you cannot mask faces
      Allow unprotected export

      Allows you to export frames and videos without password protection. When you export a file, the password is requested, which you can enter to view the frame or video. If you leave the Allow unprotected export checkbox clear, then setting a password for export is mandatory

      Confidential bookmarksAllows you to add and view confidential bookmarks
    7. Domain

      PermissionDescription
      Edit Cameras/NVRsAllows you to edit cameras and NVRs. Without this permission, you cannot edit cameras and NVRs
      Manage sites: viewAllows you to view sites. Without this permission, you cannot view sites in the Domains tab → Sites
      Manage policiesAllows you to manage policies. Without this permission, you cannot manage policies in the Domains tab → Users and Groups
      View Cameras/NVRsAllows you to view cameras and NVRs. Without this permission, you cannot view cameras and NVRs in the Domains tab → Cameras/NVRs
      Manage sites: editAllows you to edit sites. Without this permission, you cannot edit sites
      Delete Cameras/NVRsAllows you to deleate cameras and NVRs. Without this permission, you cannot delete cameras and NVRs
      RenameAllows you to rename a domain. Without this permission, you cannot rename a domain
      View media filesAllows you to view media files. Without this permission, you cannot view media files
      Delete media filesAllows you to delete media files. Without this permission, you cannot delete media files
      Manage child domain nodesAllows you to manage child domain nodes. Without this permission, you cannot manage child domain nodes
      Share domain (Roles icon)Allows you to share a domain. Without this permission, you cannot share a domain
      View supervisorAllows you to view the supervisor. Without this permission, you cannot view the supervisor
      Web-configuratorAllows you to view the web-configurator. Without this permission, you cannot view the Web-configurator in the Domains tab → Web-configurator
      View vms role namesAllows you to view vms role names. Without this permission, you cannot view vms role names
      DeleteAllows you to delete domains. Without this permission, you cannot delete domains
      View WebClient

      Allows you to access the web-client. Without this permission, the access to the web-client on the Domains tab isn't available

      View policiesAllows you to view policies. Without this permission, you cannot view policies under the Operator role

      Manage sites: delete

      Allows you to delete data in the site management in the Domains tab. Without this permission, the button for site deletion isn't available

      Apply license keyAllows you to apply a license key. Without this permission, the License file button on the domain editing panel isn't available
  4. Click the APPLY  button to save the changes.

Creation and configuration of the domain role is complete.

Editing a role

To edit a role, do the following:

  1. Click the Edit  button next to the required role.
  2. Change the settings or the name of the role.
  3. Click the APPLY  button.

Role editing is complete.

Disabling a role

To disable a role, do the following:

  1. Click the Disable  button next to the required role.
  2. In the window that opens, click the Yes button.

As a result, the role is disabled.

Restoring a role

To restore a role, do the following:

  1. Click the Restore  button.
  2. In the window that opens, click the Yes button.

As a result, the role is restored.

Deleting a role

Attention!

We recommend assigning new roles to users before you delete a role. Otherwise, all users with this role are deleted in all domains.

To delete a role, do the following:

  1. Click the Disable  button next to the required role.
  2. In the window that opens, click the Yes button.

  3. Click the Delete  button.
  4. In the window that opens, click the Yes button.

As a result, the selected role is deleted.

  • No labels