General information

Each role has different access settings for users. To configure a cloud role, go to the System settings tab→ Cloud roles.

Creating and configuring a role

To create a role, do the following:

1. Click the Add a new role button.
2. In the Name field, enter the name of the role.
   
   
3. Set the checkbox next to the required access permission. You can apply the following permissions for cloud roles:
   1. User management
      

      Permission	Description
      Cloud permission: Assign	Allows you to move users into groups. Without this permission, you can't change groups of users
      Domain policies: Edit	Allows you to edit domain policies. Without this permission, you can't edit domain policies and users
      Cloud permission: Edit Users	Allows you to create and delete users in the User permissions tab → Users. Without this permission, the Create user button isn't displayed, and you can't create/delete users You cannot disable this permission for users with the Administrator role.
      Domain roles: Manage	Allows you to manage domain roles (assign, edit, delete, and so on). Without this permission, you can't manage domain roles You cannot disable this permission for users with the Administrator role.
      Cloud Permissions: Manage	Allows you to manage cloud permissions. Without this permission, you can't manage cloud permissions You cannot disable this permission for users with the Administrator role.
      Users group: Manage	Allows you to manage groups of users, including moving users between groups. Without this permission, you can't move users between groups
      Domain policies: View	Allows you to view domain policies. Without this permission, only the domain of the user's account is available to the user; other domain policies aren't displayed
      View Users	Allows you to view a user list in the cloud. Without this permission, the Users tab in the User permissions section is inactive, and you can't access the user list

   2. Access to functions
      

      Permission	Description
      Change password	Allows you to change the user password and displays the Authentication section in the user settings. Without this permission, you can't change the password
      Dashboards: Create	Allows you to create dashboards. Without this permission, you cannot create dashboards. When you try to create a dashboard, you are redirected to the Dashboards tab
      Dashboards: Edit	Allows you to edit the created dashboards. Without this permission, the Edit button (the pencil icon) isn't displayed, and you can't edit the created dashboards
      Edit Dashboards in Marketplace	Allows you to change the settings of the dashboards in the marketplace (name, data, schedule, and so on)
      Manage Face lists	Allows you to manage face lists that the user creates. Without this permission, you can't create and edit face lists
      Manage LP lists	Allows you to manage LP lists that the user creates. Without this permission, you can't create and edit LP lists
      Monitoring: Edit	Allows you to edit the Monitoring microservice: add new widgets to a dashboard, delete, rename, change color, size, and so on
      Dashboards: Export	Allows you to export dashboards. Without this permission, you can't export dashboards
      Dashboards: Import	Allows you to import dashboards. Without this permission, you can't import dashboards
      Manage all Face lists	Allows you to manage face lists of users (creating, editing, removing). Without this permission, the Faces tab isn't displayed
      Manage all LP lists	Allows you to manage LP lists of users (creating, editing, removing). Without this permission, the LPs tab isn't displayed
      LDAP sources: Manage	Allows you to manage LDAP catalogs
      License key: Manage	Allows you to manage license keys
      Streaming: Manage	Allows you to use the streaming function and get the streaming address in the Devices tab → Streaming. Without this permission, the Streaming parameter isn't available
      Run mini configurator	Allows you to use mini configurator
      Dashboards: Share	Allows you to share a link to the dashboard. Without this permission, the Share button isn't available
      Update quota for manual export	Allows you to change the quota for uploading files
      Video export from web-client to the cloud	Allows you to export video to the cloud. If you disable this permission, the corresponding interface elements are hidden
      View classifier	Displays the Classifier tab. Without this permission, the Classifier isn't displayed
      View Dashboards	Allows you to view dashboards. Without this permission, the Dashboards tab isn't displayed
      View Dashboards in Marketplace	Allows you to view dashboards in the marketplace. Without this permission, dashboards in the marketplace aren't displayed in the Dashboards tab
      View diagnostics	Allows you to view diagnostics of the system
      Access to FULL audit	Allows you to view the full audit. Without this permission, you can't view the full audit
      Monitoring: View	Allows you to display the Monitoring microservice in the sidebar of dashboards. Without this permission, the Monitoring microservice isn't displayed in the sidebar
      View Reports	Allows you to view and edit reports. Without this permission, the Reports tab isn't displayed
      View User Rights	Allows you to view user rights. Without this permission, you can't view user rights

   3. System setup
      

      Permission	Description
      Create Axxon PSIM domains	Allows you to create an Axxon PSIM domain. Without this permission, the Create Axxon PSIM domains button isn't displayed when you want to create a domain
      Create cloud domains	Allows you to create cloud domains with the necessary parameters. Once you create a domain, you can add devices to it. Without this permission, the Create AxxonNet domains button isn't displayed when you want to create a domain
      Connect remote domains	Allows you to bind a domain by token. Without this permission, the Bind button isn't displayed when you want to create a domain
      Manage Cloud Camera and Axxon Bridge	Allows you to manage cloud cameras and Axxon Bridge (add, rename, delete, and so on). Without this permission, you can't manage cloud cameras
      Update upload quota	Allows you to edit the quota for uploading files. The quota is fixed for manual export. If the quota expires, you cannot upload files. When you delete files, disk space is freed up. When the administrator increases the quota, the upload becomes available. Without this permission, you can't edit the quota

   4. Backup
      

      Permission	Description
      Backup: Download	Allows you to download backups. Without this permission, you cannot download backups
      Backup: Restore	Allows you to restore backups. Without this permission, you cannot restore backups
      Backup: Edit schedule	Allows you to edit the schedule for backups. Without this permission, you cannot edit the backup schedule
      Backup: Manage	Allows you to manage backups. Without this permission, you cannot manage backup settings

4. Click the APPLY button to save the changes.

Creation and configuration of the cloud role is complete.

Editing a role

To edit a role, do the following:

1. Click the Edit  button next to the required role.
2. Change the settings or the name of the role.
3. Click the APPLY  button.

Role editing is complete.

Ranking roles

The ranking system allows you to determine which roles users can assign to each other at the registration. The higher the ranking, the more features a user gets. To increase the rank of a role, click the Move rank up button. To decrease the rank, click the Move rank down button.

Disabling a role

To disable a role, do the following:

1. Click the Disable button next to the required role.
2. In the window that opens, click the Yes button.
   

As a result, the role is disabled.

Restoring a role

To restore a role, do the following:

1. Click the Restore  button.
2. In the window that opens, click the Yes button.
   

As a result, the role is restored.

Deleting a role

To delete a role, do the following:

1. Click the Disable button next to the required role.
2. In the window that opens, click the Yes button.
   
   
3. Click the Delete button.
4. In the window that opens, click the Yes button.
   

As a result, the selected role is deleted.