General information
To configure a domain role, go to the System settings tab→ Domain roles:
Creating and configuring a role
To create a role, do the following:
- Click the Add a new domain role button.
- In the Name field, enter the name of the role.
- Set the checkbox next to the required access permission. You can apply the following permissions to a domain role:
System setup
Permission Value Description Unrestricted access - Select if users of this role have unrestricted domain access Unspecified No Yes Access to default videowall - Select the default value for accessing the videowall
Unspecified Access
deniedFull User rights setup access - Select the value of access rights
Attention!
When you select the Device access rights only value for the User rights setup access parameter, users of this role are only able to change access rights to connected devices in the role settings.
Unspecified No Device access rights only Yes Devices setup Allows you to set up devices in a domain. Without this permission, device setup isn't available Archive setup Allows you to set up the archive: enable, disable, rename, delete, and so on. Without this permission, archive setup isn't available Detectors setup Allows you to set up detectors. Without this permission, detectors setup isn't available Settings setup Allows you to set up settings in a domain. Without this permission, domain settings setup isn't available
Domain managing OPS Allows you to manage domain OPS: share it with other users, create, edit, delete, and so on. Without this permission, domain management isn't available Access to functions
Permission Description View cameras Allows you to view cameras in the domain as the Operator user. Without this permission, the user can't view the cameras connected to the domain
Can view face lists Allows you to view face lists. If you create a face list and bind it to the domain under the Administrator role and then go to the user page under the Operator role and disable this permission, the created list isn't displayed in the Faces tab
Request restart arp client This permission allows you to send a request to restart the arp client from the cloud to Axxon One. Without this permission, you cannot send a request to restart the arp client from the cloud to Axxon One Can bind LP list to domain or domain groups Allows you to bind the LP list to the domain or domain groups. Without this permission, you cannot bind the LP list to the domain or domain groups
Can view LP lists Allows you to view LP lists. If you create a LP list and bind it to the domain under the Administrator role and then go to the user page under the Operator role and disable this permission, the created list isn't displayed in the LPs tab
Can bind face list to domain or domain groups Allows you to bind the face list to the domain or domain groups. Without this permission, you cannot bind the face list to the domain or domain groups View arp client update status Allows you to view the arp client update status. Without this permission, you can't view the arp client update status
Programming setup Allows you to manage macros in the Web-configurator. Without this permission, you can't manage macros in the Web-configurator WebUI login Allows you to log in to the web-client. Without this permission, you cannot log in to the web-client.
Real time recognition setup Allows you to recognize faces and license plates in real time, comparing them to lists of faces and license plates
Min/Max buttons Displays a button to minimize the Axxon One client to the taskbar (see Interface of Axxon One). Without this permission, the minimize button isn't available Devices
Permission Value Description Change credentials Allows you to change the credentials of the device (camera, IP server, and so on). Without this permission, you cannot change the credentials of the device
Rename Allows you to rename devices in the Devices tab. Without this permission, you cannot rename devices Unbind device Allows you to unbind devices from the domain in the Devices tab. Without this permission, you cannot unbind devices Download support Displays the Download support button in the Devices tab. Without this permission, you cannot download support Configure bridge Allows you to configure Bridge: set settings, policies, and so on. Without this permission, you cannot manage Bridge Default camera access Select the default camera access - Access is unspecified Unspecified Access denied There is no access to the device
Archive only Only archive viewing is available Live in armed mode You can view video only if the camera is armed Live You can view a live video from the camera. Other functions and device configuration aren't available
Live/Archive You can view live video and archived video from the camera. You cannot arm/disarm and configure the camera
Live/Archive/Control All features are available. Device configuration isn't available Access full All features are available, including device configuration Default mic access Select the default microphone access - Access is unspecified Unspecified Access denied Live audio isn't available:
- from the camera;
- in the archive.
Audio recording to exported file isn't available
Access monitoring Live audio from the camera is available (you must enable the microphone). Audio in the archive isn't available
Access full All features are available Telemetry priority Select telemetry priority - Access is unspecified Unspecified Highest User can control a PTZ camera with an appropriate priority (see Controling a PTZ camera) High Normal Low Lowest No access There is no access to control a PTZ camera
Layouts
Permission Value Description Alert access Select the access level to alert events - Alert access is unspecified Unspecified Access denied Users have no access to view alert events
View only Users can only view alert events but cannot assess them Full Users can view alert events and assess them Maps access Select the access level to maps
- Access is unspecified Unspecified Access denied Users have no access to view maps View only Users can only view maps View/move/scale Users can view, scale, and move maps Full All features are available Change layout Allows you to change layouts. Without this permission, you cannot change layouts in Axxon One Layouts Tab Allows you to work with layouts. Without this permission, you cannot manage layouts Add camera in layout in monitoring
Allows you to add cameras to a layout. Without this permission, you cannot add cameras to a layout Access search Provides access to the archive search in the web-client. Without this permission, you cannot perform the search in the archive in the web-client
Edit PTZ presets Allows you to edit PTZ presets. Without this permission, you cannot edit PTZ presets Allow button Menu camera Displays the camera Menu button. Without this permission, the Menu button isn't displayed Allow show titles (captions) Allows you to view titles from the source of events on the video. Without this permission, the titles display isn't available Group panel
Allows you to view the group panel. Without this permission, you cannot view the group panel Object panel and camera search panel
Allows you to display the object panel and the camera search panel. Without this permission, you cannot view the object panel and the camera search panel
Archive and export
Permission Value Description Video export from web-client to the cloud Allows you to export video from the web-client to AxxonNet. Without this permission, export isn't available BookmarkAccess Select access to create bookmarks in the archive - Access is unspecified Unspecified Access denied You cannot create bookmarks
Create You can add bookmarks to the archive Create/protect You can add bookmarks to the archive and create protected records Create/protect/edit and delete You can add bookmarks to the archive, as well as create and edit protected records Default archive access Select the default archive access - Access is unspecified Unspecified Access denied You cannot access this archive
Full Archive is available for any operations
Access export Allows you to export. Without this permission, you cannot export video from the web-client Allow delete records Allows you to delete records Privacy
Permission Description Access System Journal Allows you to access the system journal. Without this permission, you cannot view the events of the system journal
Show error messages Shows error messages. Without this permission, error messages aren't displayed
Attention!
- Critical error messages in the system are displayed regardless of the Show error messages parameter. Critical errors include:
- geomap connection error;
- export error;
- domain disconnection error;
- insufficient network bandwidth error that is disabled by default. If necessary, you can enable it by adding the SHOW_INSUFFICIENT_BANDWIDTH_WARNING system variable with the TRUE value (see Appendix 9. Creating system variable).
Show privacy video in archive Allows you to view privacy video in the archive. Without this permission, privacy videos aren't displayed in the archive
Show faces in Live Allows you to mask faces when viewing live video. Without this permission, you cannot mask faces Allow unprotected export Allows you to export frames and videos without password protection. When you export a file, the password is requested, which you can enter to view the frame or video. If you leave the Allow unprotected export checkbox clear, then setting a password for export is mandatory
Confidential bookmarks Allows you to add and view confidential bookmarks - Critical error messages in the system are displayed regardless of the Show error messages parameter. Critical errors include:
Domain
Permission Description Edit Cameras/NVRs Allows you to edit cameras and NVRs. Without this permission, you cannot edit cameras and NVRs Manage sites: view Allows you to view sites. Without this permission, you cannot view sites in the Domains tab → Sites Manage policies Allows you to manage policies. Without this permission, you cannot manage policies in the Domains tab → Users and Groups View Cameras/NVRs Allows you to view cameras and NVRs. Without this permission, you cannot view cameras and NVRs in the Domains tab → Cameras/NVRs Manage sites: edit Allows you to edit sites. Without this permission, you cannot edit sites Delete Cameras/NVRs Allows you to deleate cameras and NVRs. Without this permission, you cannot delete cameras and NVRs Rename Allows you to rename a domain. Without this permission, you cannot rename a domain View media files Allows you to view media files. Without this permission, you cannot view media files Delete media files Allows you to delete media files. Without this permission, you cannot delete media files Manage child domain nodes Allows you to manage child domain nodes. Without this permission, you cannot manage child domain nodes Share domain (Roles icon) Allows you to share a domain. Without this permission, you cannot share a domain View supervisor Allows you to view the supervisor. Without this permission, you cannot view the supervisor Web-configurator Allows you to view the web-configurator. Without this permission, you cannot view the Web-configurator in the Domains tab → Web-configurator View vms role names Allows you to view vms role names. Without this permission, you cannot view vms role names Delete Allows you to delete domains. Without this permission, you cannot delete domains View WebClient Allows you to access the web-client. Without this permission, the access to the web-client on the Domains tab isn't available
View policies Allows you to view policies. Without this permission, you cannot view policies under the Operator role Manage sites: delete
Allows you to delete data in the site management in the Domains tab. Without this permission, the button for site deletion isn't available
Apply license key Allows you to apply a license key. Without this permission, the License file button on the domain editing panel isn't available
- Click the APPLY button to save the changes.
Creation and configuration of the domain role is complete.
Editing a role
To edit a role, do the following:
- Click the Edit button next to the required role.
- Change the settings or the name of the role.
- Click the APPLY button.
Role editing is complete.
Disabling a role
To disable a role, do the following:
- Click the Disable button next to the required role.
- In the window that opens, click the Yes button.
As a result, the role is disabled.
Restoring a role
To restore a role, do the following:
- Click the Restore button.
- In the window that opens, click the Yes button.
As a result, the role is restored.
Deleting a role
Attention!
We recommend assigning new roles to users before you delete a role. Otherwise, all users with this role are deleted in all domains.
To delete a role, do the following:
- Click the Disable button next to the required role.
- In the window that opens, click the Yes button.
- Click the Delete button.
- In the window that opens, click the Yes button.
As a result, the selected role is deleted.