A role is intended for assigning a group of users individual rights and permissions for administration, management and/or monitoring of individual components of Axxon One.

To create a new role, do the following:

1. At the end of the list of system roles, click the Create link. The new role will be added to the system, with its properties displayed on the right side.
   

2. Enter a name for the role in the corresponding field (1).
   

   Parameters	Access right	Description
   Basic
   Name	−	Enter a name for the role (1)
   Map control		Select the access level to the maps for users with the current role (2)
   Map management	View only	You can only view maps
   	View/move/scale	You can views, move, and scale maps
   	Full access	All options available
   Other
   Archive depth viewing restriction	−	If you need to limit the access of users of a given role to all system archives, you can specify the archive depth limit in hours (3). If no limit is set, users may view all video recordings
   Access to Functions		Set access permissions to Axxon One functions (4)
   Access to Search in archive mode	Yes	Archive search (see Video surveillance in Archive Search mode)
   	No
   Adding camera to layout in monitoring mode	Yes	Adding a camera to a layout in live video mode (see Adding cameras to cells)
   	No
   Adding/editing presets	Yes	Adding and editing presets for PTZ cameras (see Selecting a preset)
   	No
   Alarms processing	−	Alarms management (see Video surveillance in Alarm Management mode)
   	No access	Users have no access to alarm videos
   	View only	Users can view alarm videos, but they can't evaluate alarms
   	Full access	Users can view alarm videos and evaluate alarms
   Allow comments in archive	−	Creating comments in the archive (see Operator comments) and protected records (see Protecting video footage from FIFO overwriting)
   	No access	No comments allowed
   	Create	Add comments to the archive
   	Create/Protect	Add comments to the archive, create protected records
   	Create/Protect/ Edit/Delete	Add comments to the archive, create and edit protected records
   Allow to delete records	Yes	Removing video recordings from the archive (see Delete a part of an archive)
   	No
   Allow unprotected export	Yes	Exporting frames and video recordings without password protection (see Frame export, Standard video export). Set No to require setting a password when exporting (see Exporting Frames and Video Recordings)
   	No
   Export	Yes	Exporting frames and video recordings (see Exporting Frames and Video Recordings)
   	No
   Layout editing	Yes	Editing layouts (see Editing layouts)
   	No
   Minimize to taskbar	Yes	Minimizing the Client to the tray (see Interface of the Axxon One Software Package)
   	No
   Operating domain	Yes	Managing Axxon domain (see Axxon Domain operations)
   	No
   Permissions to access via WebUI	Yes	Access to the Web server (see Working with Axxon One Through the Web-Client)
   	No
   Realtime recognition setup	Yes	Faces and license plates recognition in real-time (see Configuring real-time face recognition, Configuring real-time vehicle license plate recognition)
   	No
   Show captions	Yes	Displaying captions (see Viewing titles from POS terminals)
   	No
   Show faces	Yes	Showing faces (see Masking faces)
   	No
   System log	Yes	Viewing the system log (see The System Log)
   	No
   Unlock camera menu button	Yes	Context menu of a video camera (see Viewing Tile Context Menu)
   	No
   View masked video	Yes	Viewing masked video (see Setting up privacy masking in Video Footage, Specific settings for People masking detection tool)
   	No
   Access to Interfaces		Configure the access rights to the interfaces (5)
   Group panels	Yes	Configure the access rights to video camera groups in the Hardware tab and to the video camera groups in the layout interface
   	No
   Layouts tab	Yes	Configure the access rights to the Layouts tab. This parameter applies to both the Client and the Web Client (see Web-Client's GUI)
   	No
   Objects panel and Camera search panel	Yes	Configure the access rights to the Objects panel (see Objects Panel) and the Camera search panel (see Camera Search Panel)
   	No
   Access to Settings
   Archive settings	Yes	Configure the access permissions to the Settings tabs and to the system error messages (5). If you set the User Permission settings parameter to Device access rights only, all users of the given role will have the rights to change only the access rights to the connected devices. Error messages are displayed in real-time in the Layouts interface. If the Programming setup is not available for the user role, the user will not be able to use the created macros until the appropriate rights are granted.
   	No
   Detection settings	Yes
   	No
   Device settings	Yes
   	No
   Options settings	Yes
   	No
   Programming settings	Yes
   	No
   Show error messages	Yes
   	No
   User Permission settings	Yes
   	No
   Access to Tabs
   Layouts tab	Yes	Set access permissions to the Layouts interface in Axxon One (6). This parameter applies to both the Client and the Web Client (see Web-Client's GUI)
   	No
   Supervisor confirmation		Set the parameters to apply the four-eye principle (7)
   Supervisor for acccess to export	−	If the administrator has to confirm the launch of export for users of this role (see Exporting Frames and Video Recordings), select the corresponding role in the list
   Supervisor for authorization in client	−	If the administrator has to confirm the login of users of this role (see Starting an Axxon One Client), select the corresponding role in the list
   Time schedule management
   Time schedule	−	If you need to grant the users in this role permissions only for a certain period of time, select a time schedule (8) from the list. These users will not be able to use their permissions outside of the selected time schedule
   Video walls management
   Server	Yes	Configure the rights to manage the connected Clients' monitors by setting permissions for each Server on Axxon domain (9). A user who has management permissions for the monitors of a particular Server can manage monitors of any Client connected to that Server
   	No

   
   

3. Set the access permissions to hardware and archives of an Axxon domain (10). You can set permissions for all Server devices, for a specific device (the Devices tab) or a group of devices (the Groups tab, see Configuring video camera groups). You cannot switch tabs before you have saved the newly created role. You should save your changes while editing permissions in any tab and then you get access to another tab.
   

   If a camera belongs to different groups that have different access settings, then the last set access permission is applied to the camera.

   
   

   Device	Access permissions	Description
   Video camera	No access	You cannot access the device
   	Archive only	You can only view video footage in archive
   	Live in Armed mode	You can view video from the camera only when the camera is armed
   	Live	You can live video from the camera. Other functions and device configuration are not available
   	Live/Archive	You can view live and recorded video from the camera. You cannot arm/disarm/configure the camera
   	Live/Archive/Control	All functions available. You cannot configure the device
   	Live/Archive/Control/Configure	All functions and settings available
   Microphone	No access	You cannot listen to live sound from the video camera. You cannot listen to sound recordings from the archive
   	Live Audio	You can listen to live sound from the video camera (the microphone should be turned on). You cannot listen to sound recordings from the archive
   	Live Audio and Archive	All functions are available
   PTZ	No access	You cannot control the PTZ device
   	Minimum level	You control the PTZ device with the corresponding priority (see Controlling a PTZ Camera)
   	Low level
   	Medium level
   	High level
   	Maximum level
   Archive	No access	Access is not provided to this archive
   	Full access	Archive is available for all function

   You can configure group permissions to access devices and archives of a particular Server. To do so, select an access level for the Server object. Depending on the selected level, particular access levels are automatically configured for the devices and archives of the relevant Server:

   Server access level	Device/archive	Device/archive access level
   Custom	-	Access levels for devices and archives are set manually
   No access	-	No access to devices and archives
   Archive Only	Video camera	Archive only
   	Microphone	Live Audio and Archive
   	PTZ	Medium level
   	Archive	Full access
   Live in Armed Mode	Video camera	You can view armed cameras
   	Microphone	Live Audio.
   	PTZ	Medium level.
   	Archive	No access
   Live	Video camera	You can view live video
   	Microphone	Live Audio
   	PTZ	Medium level
   	Archive	No access
   Live/Archive	Video camera	You can view live and recorded video
   	Microphone	Live Audio and Archive
   	PTZ	Medium level
   	Archive	Full access
   Live/Archive/Control	Video camera	All functions. Configuration not available
   	Microphone	Live Audio and Archive
   	PTZ	Medium level
   	Archive	Full access
   Live/Archive/Control/Configure	Video camera	All functions + configuration available
   	Microphone	Live Audio and Archive
   	PTZ	Maximum level
   	Archive	Full access

   You can select the level of access to one camera and extend it to other cameras. To do it, do the following:

   1. Select the access level for a camera.

   2. Click the button and select cameras the same settings should be applied to.
      

      To quickly select multiple cameras, hold down the Shift key, select the first and last camera the settings should be applied to. Selecting any camera from the highlighted ones will result in selecting them all. 

4. Select the appropriate access level to set the possibility to manually run all or some macros (see Configuring Macros) from the Layouts interface (11).
   

   By default, created macros are available only to users from the admin group. Users outside the admin group can create macros, if they have the permissions to create them. They cannot use them until they have the permissions to use them.

   
   

   Macros access level	Macro type	Access permission	Description
   No access	Automatic rules	No	No access to macros
   	Event rules
   	Cycle rules
   Custom	Automatic rules	Yes	Access permission for macros is set manually
   		No
   	Event rules	Yes
   		No
   	Cycle rules	Yes
   		No
   Full access	Automatic rules	Yes	Full access to macros
   	Event rules
   	Cycle rules

   
   

5. Click the Apply button to save the role.

The new role has been created.

You can copy a role. To do it, do the following:

1. Select the role to copy.
2. Click the Create button.

A new role will be created with the same parameters as the selected role.

To delete a role, do the following:

1. Select the role to delete.

2. Click the Delete button.


   You cannot delete a role if the user who is logged in belongs to that role.

   
   

3. Click the Apply button to save the changes.

The role has been deleted. All users who belong to this role will also be deleted.