Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Tip

Types of permissions to access hardware, archives and macros

...

width45%
Panel
titleOn this page:

Table of Contents

...

In Axxon One, every user has permissions based on his roletheir role. There are two types of users: local (stored in the Server database) and LDAP.

Note
titleAttention!

To enable LDAP users, you must configure access to LDAP catalogs.

TermDescription
Role
Roles
Defines

Determine a set of permissions for users

in 

in Axxon One. Several users can have the same role in Axxon One

.

User
Users

An account in Axxon One. Each user can be assigned to one or more roles. In this case,

the

user’s permissions are summed up from all the roles

which

that the user has,

i.e., the

that is, the permissions with the widest access to configuring the components of Axxon One are selected from all user roles.

The user logs into the system using a unique username and password. The actions of all system users are registered in the system log (see System log)

Permissions

Determine what actions

a

the user can perform in the system. These actions

may

can include administering, managing and monitoring the components of a video surveillance system. Permissions are configured along with roles and are granted to users assigned to the corresponding roles

.

For example, three Manager users are assigned the Supervisor role. Users have permissions to monitor and manage video surveillance system components. User permissions are configured when creating a role.

...

By default, there is one role (admin) and  and one user (root). The root user belongs to the admin role and has rights permissions to configure all components of the video surveillance system. To add a user with individual permissions, create a new role with the necessary permissions and then create a new user account.Image Removed

Info
titleNote

Only admin users can create other admin role users.

Image Added

Common algorithm for

...

To register users with individual permissions, it is necessary to create a new role with these permissions and a new user account. To do thisconfiguring users:

  1. Create a new role on the Users tab (see Creating and configuring roles).Configure and configure permissions for the new role (see Roles).
  2. Register new users for the role (see Creating local users).
  3. Enter additional information about users.

There are two types of users: local (stored in the Server database) and LDAP (see Connecting LDAP users).

To enable LDAP users, you must configure access to LDAP catalogs.

The actions of all system users are recorded in the system log (see System log).

Info
titleNote

The following user actions are logged:

  • login and log out of the Client;
  • unsuccessful login attempt;
  • adding, editing and removing hardware settings, archive or detectors;
  • creating, editing and removing macros;
  • adding, editing and removing user permissions;
  • alarm initiation triggered by video camera;
  • arming and disarming the video camera;
  • controlling a PTZ camera;
  • creating and editing comments;
  • exporting frames and video recordings.

In all user-specific events, the user IP address is indicated.

Image Removed

Types of permissions to access hardware, archives and macros

In Axxon One, it is possible to set user permissions both for a specific device (object) and for a group of devices. Specifics of object and group permission types are described in the table below.

...

Configuring access to a specific device, archive or macro in the system

...

Configuring access to all cameras added to a group (see Creating a Group object).

Priority below Object permissions

Info
titleNote
  • If the camera belongs to several groups with different access levels assigned to them, the user permissions with the highest access level are used.
  • If the camera belongs to a child group, then the permissions defined for the child group will take precedence when determining access to the camera

...

Configuring access to all devices, archives or macros that will be created in the system.

If Group or Object rights are not assigned to the device after its creation, then the default permissions are applied.

...

  1. and enter additional information about users (see Configuring local users).