Page History

General information

A role is intended for assigning a group of users individual rights and permissions for administration, management and/or monitoring of individual components of Axxon One.

Creating a role

To create a new role, do the following:

1. At the end of the list of system roles, click the Create link. The new role
will be
2. is added to the system, with its properties displayed on the right side.
   Image Modified
Expand

title	Expand the table with access permission settings

3. Configure the access permissions

.
Image Removed


4. :
   

5. Parameters	Access level	Description
   Basic
   Name	−	Enter a name for the role

(1)

6. Map control		Select the access level to the maps for users with

the current

7. this role

(2)

8. Map management	No access	Users cannot view maps
   	View only	Users can only view maps
   	View/move/scale	Users can views, move, and scale maps
   	Full access	All operations with map are available
   Other
   Archive depth viewing restriction	−	If you need to limit the access of users of this role to all system archives, you can specify the archive depth limit in hours. If no limit is set, users can view all videos
   Access to Functions		Set access permissions to Axxon One

 functions (3)

9. functions
   Access to confidential comments	Yes	Add and view confidential comments
   	No
   Access to Search in archive mode	Yes	Archive search (see Video surveillance in

archive search

10. the Archive Search mode)
    	No
    Adding camera to layout in monitoring mode	Yes	Add a camera to a layout in

live video

11. the Live mode (

see

12. see Adding cameras to cells)
    	No
    Adding/editing presets	Yes	Add and edit presets for PTZ cameras (see Selecting a preset)
    	No
    Alarms processing	−	Alarms management (see Video surveillance in

alarm

13. the Alarm management mode)
    No access	Users have no access to alarm

videos

14. events
    View only	Users can view alarm

videos

15. events, but they can't assess

alarms

16. them
    Full access	Users can view alarm

videos

17. events and assess

alarms

18. them
    Allow comments in archive	−	Create comments in the archive (see Operator comments) and protected records (see Protecting video

footage

19. recordings from FIFO overwriting)
    No access	No comments allowed
    Create

Add

20. Users can add comments to the archive

    Create/Protect

Add

21. Users can add comments to the archive, create protected records

    Create/Protect/ Edit and delete

Add

22. Users can add comments to the archive, create and edit protected records
    Allow to delete records	Yes	Remove

video recordings

23. videos from the archive (see

Delete

24. Deleting a part of

an

25. archive)
    	No
    Allow unprotected export	Yes	Export frames and

video recordings

26. videos without password protection (see Frame export, Standard video recordings export). Set No to require setting a password when exporting (see Exporting frames and video recordings)
    	No
    Export	Yes	Export frames and

video recordings

27. videos (see Exporting frames and video recordings)
    	No
    Layouts editing	Yes	Edit layouts (see Editing layouts)
    	No
    Minimize to taskbar	Yes	Minimize the

Client

28. client to the tray (see Interface of

the

29. Axxon One

Software Package

30. )
    	No
    Operating domain	Yes	Manage Axxon domain (see

Axxon Domain operations

31. Operations with domains)
    	No
    Permissions to access via WebUI	Yes	Access to the Web-Server (see Working with Axxon One through the Web-Client)
    	No
    Show captions	Yes	Display captions (see Viewing titles from POS terminals)
    	No
    Show faces	Yes	Showing faces (see Masking faces)
    	No
    System log	Yes	View the system log (see

The

32. System

Log

33. log)
    	No
    Unlock camera menu button	Yes	Context menu of a

video

34. camera (

see Viewing Tile

35. see Context Menu of the Surveillance window)
    	No
    View masked video	Yes	View masked video (see

Setting up

36. Configuring privacy masking in

Video Footage

37. archive,

Specific settings for

38. People masking

detection tool

39. )
    	No
    Access to Interfaces		Configure the access permissions to the interfaces

(4)

40. Group panels	Yes	Configure the access permissions to

video

41. camera groups

in the

42. on the Hardware tab and to the

video

43. camera groups

in

44. on the Layouts interface
    	No
    Layouts tab	Yes	Configure the access permissions to the Layouts tab. This parameter applies to both the

Client

45. client and the Web-Client (see Web-Client GUI)
    	No
    Objects panel and Camera search panel	Yes	Configure the access permissions to the Objects panel (see

Objects Panel

46. Object panel) and the Camera search panel (see Camera Search Panel)
    No
    Access to Settings
    Archive settings	Yes	Configure the access permissions to the Settings tabs

and to the system error messages (5).

47. Note title Attention!

• Error messages are displayed in real-time in the Layouts interface.
Image Removed

48. If you

set

49. select the Device access rights only value in the User Permission settings parameter

to Device access rights only

50. , all users of the given role will have the

rights

51. permissions to change only the access

rights

52. permissions to the connected devices. If the Programming setup is not available for the user role, the user will not be able to use the created macros until the appropriate

rights are granted.

53. permissions are granted. Configure the access permissions to the system error messages Note title Attention! System error messages are displayed in real-time in the Layouts interface. Image Added

54. Critical error messages in the system

, such as "Insufficient network bandwidth",

55. are displayed regardless of the Show error messages

setting

56. parameter. Critical errors include: geomap connection error; export error; domain disconnection error; insufficient network bandwidth error that is disabled by default. Ifnecessary, you can enable it by adding the SHOW_INSUFFICIENT_BANDWIDTH_WARNING system variable with the TRUE value (see Creating system variable).
    	No
    	Detection settings	Yes
    		No
    	Device settings	Yes
    		No
    	Options settings	Yes
    		No
    	Programming

settings

57. setup	Yes
    	No
    Show error messages	Yes
    	No
    User Permission settings	Yes
    	Device access rights only
    	No
    Additional
    Comment	−	Specify additional information about the user, if necessary

(6). If no value is specified, users can view all videos

58. Supervisor confirmation

Set the parameters to apply the four-eye principle (7)

59. Supervisor for acccess to export

    −

    If the administrator has to confirm the launch of export for users of this role (see Exporting frames and video recordings), select the corresponding role in the list

Supervisor for authorization in client−

60. If the administrator has to confirm the login of users of this role (see Starting

an Axxon One Client

61. the client), select the corresponding role in the list Note title Attention! If a user belongs to several roles and each of these roles has its own supervisor, the user can receive confirmation to access export or authorization from a single administrator. Info title Note For example, a user can belong to several roles at the same time: Operator 1, Operator 2, Operator 3. Each of these roles has its own supervisor: For Operator 1, the supervisor is Admin 1. For Operator 2, the supervisor is Admin 2. For Operator 3, the supervisor is Admin 3. The user needs to receive confirmation from only one of the three administrators. If a user belongs to a regular role (such as Operator) and an administrator role at the same time, supervisor confirmation isn't required, provided that the administrator role can be used as supervisor. Info title Note For example, a user belongs to the Operator 1 and Admin 1 roles at the same time. If Admin 1 is selected as supervisor in the Supervisor confirmation settings, the user doesn't need to receive confirmation to access export or authorization.
    	Supervisor for authorization in client	−
    Time schedule management
    Time schedule	−	If you need to grant the users in this role permissions only for a certain period of time, select a time

schedule (8) from

62. schedule from the list. These users will not be able to use their permissions outside of the selected time schedule
    Video walls management
    Server	Yes	Configure the

rights

63. permissions to manage the connected

Clients

64. clients' monitors by setting permissions for each

Server

65. server on Axxon domain

(9)

66. . A user who has management permissions for the monitors of a particular

Server

67. server can manage monitors of any

Client

68. client connected to that

Server

69. server
    	No

70. On the Groups tab, configure the

default

71. Default permissions (

10,

72. see

Configuring user permissions

73. Types of permissions to access hardware, archives and macros).
    

    Info
    title Note
    When you create a new role, you cannot go to another tab until the role is saved. If you change any access permissions on any tab, you cannot go to another tab until the settings are saved.

Image Removed
Expand

title	Expand the table with default access permissions

75. Device	Access level	Description
    Default permissions		Configure the default permissions to devices
    Camera access	No access	No access to the device
    	Archive only	User can view only the archive
    	Live in Armed mode	User can view video from the camera only when the camera is armed
    	Live	User can view live video from the camera. Other functions and device configuration are not available
    	Live/Archive	User can view live and recorded video from the camera. User cannot arm/disarm/configure the camera
    	Live/Archive/Control	All functions available. User cannot configure the device
    	Live/Archive/Control/Configure	All functions and device configuration available
    Microphone access	No access	User cannot listen to live audio: from the camera

. User cannot listen to audio

76. ; in the archive.

Audio

77. Audio recording

 recording

78. to an exported file is not available
    Live Audio	User can listen to live audio from the camera (the microphone must be turned on). User cannot listen to audio in the archive
    Live Audio and Archive	All functions are available
    PTZ priority	No access	User cannot control the PTZ device
    	Minimum level	User can control the PTZ device with the corresponding priority (see Controlling a PTZ

Camera

79. camera)
    	Low level
    	Medium level
    	High level
    	Maximum level

80. On the Groups tab, configure the

group

81. Group permissions if there are camera groups (

11,

82. see Configuring video camera groups).
    

Expand

title	Expand the table with group access permissions

83. Device	Access level	Description

Misc

84. Group permissions

    Configure group access permissions to cameras (

see Configuring user permissions

85. see Types of permissions to access hardware, archives and macros)
    Camera group	Inherited	Access permissions are inherited from

the "

86. the Default permissions

"

87. tab → Camera access

(see the previous step)

88. No access	No access to the device
    Archive only	User can view only the archive
    Live in Armed mode	User can view video from the camera only when the camera is armed
    Live	User can view live video from the camera. Other functions and device configuration are not available
    Live/Archive	User can view live and recorded video from the camera. User cannot arm/disarm/configure the camera
    Live/Archive/Control	All functions available. User cannot configure the device
    Live/Archive/Control/Configure	All functions and device configuration available

89. If necessary, configure the access permissions to a specific device

(the

90. on the Devices tab

, 12)

91. .
    To do this, select the access level for

the individual

92. a specific device (

see Configuring user permissions

93. see Types of permissions to access hardware, archives and macros). 


Image Removed

94. 
    

Expand

title	Expand the table with object access permissions

"

95. Access level	Device	Access level to device
    Inherited	Camera	Access levels are inherited from the

Groups tab

96. Default permissions

" "

97. tab →Groups or from the group permissions
    Microphone	Access levels are inherited from the

Groups tab

98. Default permissions

"

99. tab → Groups
    	PTZ
    Archive only	Camera	Archive only
    	Microphone	Live audio and archive
    	PTZ	Medium level
    Live in Armed mode	Camera	View in armed mode
    	Microphone	Live audio
    	PTZ	Medium level
    Live	Camera	View live video
    	Microphone	Live audio
    	PTZ	Medium level
    Live/Archive	Camera	View live video and archive
    	Microphone	Live audio and archive
    	PTZ	Medium level
    Live/Archive/Control	Camera	All functions, configuration isn't available
    	Microphone	Live audio and archive
    	PTZ	Medium level
    Live/Archive/Control/Configure	Camera	All functions, configuration is available
    	Microphone	Live audio and archive
    	PTZ	Maximum level

    You can specify the access level to

an individual

100. a specific camera and extend it to other cameras. To do

it

101. this, do the following:
     

     1. Select the access level to a camera from a drop-down list on the Devices tab.

     2. Click the

Image Removed

102. 1. Image Added button and select the cameras, to which you want to specify the same access level.
        

Image Removed

103. 1. Image Added

     2. Click the Apply button.

     As a result,

the

104. the specified access level

will be

105. is extended to the selected cameras.

 

106. 
     To quickly select multiple cameras,

hold

107. press down the Shift key, select the first and last camera, to which you want to specify the same access level. The

checkbox will

108. checkboxes set for all selected cameras when you select any of them.

     Info
     title Note
     Similarly, you can extend the access levels to microphones, PTZ devices and archives.

109. Configure the access Default permissions to domain archives . You can set the or Archive permissions to all archives (13) or to a specific archive (14).
     Image Removed
     

     Expand

     title	Expand the table with archive access permissions

     in the Archives section.
     

     Device	Access level	Description
     Default permissions		Configure the default access permissions to the archive (

     see Configuring user permissions

     see Types of permissions to access hardware, archives and macros)
     Archive access	No access	No access to this archive
     	Full access	Full access to the archive
     Archive permissions		Configure the permissions to a specific archive (

     see Configuring user permissions

     see Types of permissions to access hardware, archives and macros)
     Archive	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to this archive
     	Full access	Full access to the archive

      Set
 interface by selecting the corresponding access level
110. Configure the
possibility to manually run all or some macros (see Configuring macros and counters) from the Layouts
111. Default permissions to macros or Macro permissions to a specific macro in the Macros section.

     Note
     title Attention!
     Users outside the admin

group can

112. role can create macros, if they have the permissions to create them. They cannot use them until they have the permissions to use them.

Image Removed
Expand

title	Expand the table with macros access permissions

114. Macro type	Access level	Description
     Default permissions		Configure the default permissions to macros (

15, see Configuring user permissions

115. see Types of permissions to access hardware, archives and macros)
     Macro access	No access	No access to macros
     	Full access	Full access to macros
     Macro permissions		Configure the access permissions to a specific macro (

16,

116. see

Configuring user permissions

117. Types of permissions to access hardware, archives and macros)
     Automatic rules	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to macros
     	Full access	Full access to macros
     Event rules	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to macros
     	Full access	Full access to macros
     Cycle rules	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to macros
     	Full access	Full access to macros

118. Click the Apply

 button

119. Image Added button to save the

role

120. changes.

The A new role has been is created.

Copying a role

You can copy a role. To do itthis, do the following:

Select
1. Click the name of the role that you want to copy.
2. Click the Create button.

A new role will be is created with the same parameters as the selected role.

Removing a role

To delete remove a role, do the following:

1. Select the role that you want to

delete

2. remove.

3. Click the

Delete

4. Remove Image Added button.


   Info
   title Note
   You cannot delete a role if the user who is logged in belongs to that role.

5. Click the Apply Image Added button
to save the changes
6. .

The role has been deletedis removed. All users who belong to this role will are also be deletedremoved.