Page History

General information

A role is intended for assigning a group of users individual rights and permissions for administration, management and/or monitoring of individual components of Axxon One.

Creating a role

To create a new role, do the following:

1. At the end of the list of system roles, click the Create link. The new role
will be
2. is added to the system, with its properties displayed on the right side.
   Image Modified
Enter a name for the role in the corresponding field (1).
Image Removed

3. Configure the access permissions:
   

   Parameters	Access

right

4. level	Description
   Basic
   Name	−	Enter a name for the role

(1)

5. Map control		Select the access level to the maps for users with

the current

6. this role

(2)

7. Map management	No access	Users cannot view maps
   	View only

You

8. Users can only view maps

   View/move/scale

You

9. Users can views, move, and scale maps
   Full access	All

options

10. operations with map are available
    Other
    Archive depth viewing restriction	−	If you need to limit the access of users of

a given

11. this role to all system archives, you can specify the archive depth limit in

hours (3)

12. hours. If no limit is set, users

may

13. can view all

video recordings

14. videos
    Access to Functions		Set access permissions to Axxon One

 functions (4)

15. functions
    Access to confidential comments	Yes	Add and view confidential comments
    	No
    Access to Search in archive mode	Yes	Archive search (see Video surveillance in the Archive Search mode)
    	No
    Adding camera to layout in monitoring mode	Yes

Adding

16. Add a camera to a layout in

live video mode (see

17. the Live mode (see Adding cameras to cells)
    	No
    Adding/editing presets	Yes

Adding

18. Add and

editing

19. edit presets for PTZ cameras (see Selecting a preset)
    	No
    Alarms processing	−	Alarms management (see Video surveillance in the Alarm

Management

20. management mode)
    No access	Users have no access to alarm

videos

21. events
    View only	Users can view alarm

videos

22. events, but they can't

evaluate alarms

23. assess them
    Full access	Users can view alarm

videos

24. events and

evaluate alarms

25. assess them
    Allow comments in archive	−

Creating

26. Create comments in the archive (see Operator comments) and protected records (see Protecting video

footage

27. recordings from FIFO overwriting)
    No access	No comments allowed
    Create

Add

28. Users can add comments to the archive

    Create/Protect

Add

29. Users can add comments to the archive, create protected records

    Create/Protect/ Edit

/DeleteAdd

30. and delete	Users can add comments to the archive, create and edit protected records
    Allow to delete records	Yes

Removing video recordings

31. Remove videos from the archive (see

Delete

32. Deleting a part of

an

33. archive)
    	No
    Allow unprotected export	Yes

Exporting

34. Export frames and

video recordings

35. videos without password protection (see Frame export, Standard video recordings export). Set No to require setting a password when exporting (see Exporting

Frames

36. frames and

Video Recordings

37. video recordings)
    	No
    Export	Yes

Exporting

38. Export frames and

video recordings

39. videos (see Exporting

Frames

40. frames and

Video Recordings

41. video recordings)
    	No

Layout

42. Layouts editing

    Yes

Editing

43. Edit layouts (see Editing layouts)
    	No
    Minimize to taskbar	Yes

Minimizing

44. Minimize the

Client

45. client to the tray (see Interface of

the

46. Axxon One

Software Package

47. )
    	No
    Operating domain	Yes

Managing

48. Manage Axxon domain (see

Axxon Domain operations

49. Operations with domains)
    	No
    Permissions to access via WebUI	Yes	Access to the Web

server

50. -Server (see Working with Axxon One

Through

51. through the Web-Client)
    	No

Realtime recognition setup YesFaces and license plates recognition in real-time (see Configuring real-time face recognition, Configuring real-time vehicle license plate recognition)No

52. Show captions

    Yes

Displaying

53. Display captions (see Viewing titles from POS terminals)
    	No
    Show faces	Yes	Showing faces (see Masking faces)
    	No
    System log	Yes

Viewing

54. View the system log (see

The

55. System

Log

56. log)
    	No
    Unlock camera menu button	Yes	Context menu of a

video

57. camera (

see Viewing Tile

58. see Context Menu of the Surveillance window)
    	No
    View masked video	Yes

Viewing

59. View masked video (see

Setting up

60. Configuring privacy masking in

Video Footage

61. archive,

Specific settings for

62. People masking

detection tool

63. )
    	No
    Access to Interfaces		Configure the access

rights

64. permissions to the interfaces

(5)

65. Group panels	Yes	Configure the access

rights

66. permissions to

video

67. camera groups

in the

68. on the Hardware tab and to the

video

69. camera groups

in

70. on the

layout

71. Layouts interface
    	No
    Layouts tab	Yes	Configure the access

rights

72. permissions to the Layouts tab. This parameter applies to both the

Client

73. client and the Web-Client (see Web-Client

's

74. GUI)
    	No
    Objects panel and Camera search panel	Yes	Configure the access

rights

75. permissions to the Objects panel (see

Objects Panel

76. Object panel) and the Camera search panel (see Camera Search Panel)
    No
    Access to Settings
    Archive settings	Yes	Configure the access permissions to the Settings tabs

and to the system error messages (5).

77. Note title Attention! If you

set

78. select the Device access rights only value in the User Permission settings parameter

to Device access rights only

79. , all users of the given role will have the

rights

80. permissions to change only the access

rights

81. permissions to the connected devices.

InfotitleNote Note

title	Attention!

Error messages are displayed in real-time in the Layouts interface.

Image Removed


83. If the Programming setup is not available for the user role, the user will not be able to use the created macros until the appropriate

rights

84. permissions are granted. Configure the access permissions to the system error messages Note title Attention! System error messages are displayed in real-time in the Layouts interface. Image Added Critical error messages in the system are displayed regardless of the Show error messages parameter. Critical errors include: geomap connection error; export error; domain disconnection error; insufficient network bandwidth error that is disabled by default. Ifnecessary, you can enable it by adding the SHOW_INSUFFICIENT_BANDWIDTH_WARNING system variable with the TRUE value (see Creating system variable).
    	No
    	Detection settings	Yes
    		No
    	Device settings	Yes
    		No
    	Options settings	Yes
    		No
    	Programming

settings

85. setup	Yes
    	No
    Show error messages	Yes
    	No
    User Permission settings	Yes
    	Device access rights only
    	No

Access to TabsLayouts tabYes

Set access permissions to the Layouts interface in Axxon One (6). This parameter applies to both the Client and the Web Client (see Web-Client's GUI)

NoSupervisor confirmation

86. Additional
    Comment	−	Specify additional information about the user, if necessary
    Supervisor confirmation

Set the parameters to apply the four-eye principle (7)

87. Supervisor for acccess to export	−	If the administrator has to confirm the launch of export for users of this role (see Exporting

Frames

88. frames and

Video Recordings

89. video recordings), select the corresponding role in the list

Supervisor for authorization in client−

90. If the administrator has to confirm the login of users of this role (see Starting

an Axxon One Client

91. the client), select the corresponding role in the list Note title Attention! If a user belongs to several roles and each of these roles has its own supervisor, the user can receive confirmation to access export or authorization from a single administrator. Info title Note For example, a user can belong to several roles at the same time: Operator 1, Operator 2, Operator 3. Each of these roles has its own supervisor: For Operator 1, the supervisor is Admin 1. For Operator 2, the supervisor is Admin 2. For Operator 3, the supervisor is Admin 3. The user needs to receive confirmation from only one of the three administrators. If a user belongs to a regular role (such as Operator) and an administrator role at the same time, supervisor confirmation isn't required, provided that the administrator role can be used as supervisor. Info title Note For example, a user belongs to the Operator 1 and Admin 1 roles at the same time. If Admin 1 is selected as supervisor in the Supervisor confirmation settings, the user doesn't need to receive confirmation to access export or authorization.
    	Supervisor for authorization in client	−
    Time schedule management
    Time schedule	−	If you need to grant the users in this role permissions only for a certain period of time, select a time

schedule (8) from

92. schedule from the list. These users will not be able to use their permissions outside of the selected time schedule
    Video walls management
    Server	Yes	Configure the

rights

93. permissions to manage the connected

Clients

94. clients' monitors by setting permissions for each

Server

95. server on Axxon domain

(9)

96. . A user who has management permissions for the monitors of a particular

Server

97. server can manage monitors of any

Client

98. client connected to that

Server

99. server
    	No

Set the access

100. On the Groups tab, configure the Default permissions (seeTypes of permissions to access hardware

and archives of an Axxon domain (10). You can set permissions for all Server devices, for a specific device (the Devices tab) or a group of devices (the Groups tab, see Configuring video camera groups). You cannot switch tabs before you have saved the newly created role. You should save your changes while editing permissions in any tab and then you get access to another tab.


101. , archives and macros).
     

     Info
     title Note
     When you create a new role, you cannot go to another tab until the role is saved. If you change any access permissions on any tab, you cannot go to another tab until the settings are saved.

     Device	Access level	Description
     Default permissions		Configure the default permissions to devices
     Camera access	No access	No access to

Note
title Attention!
If a camera belongs to different groups that have different access settings, then the last set access permission is applied to the camera.

Device

Access permissions

Description

Video camera

No access

You cannot access

102. the device

     Archive only

You

103. User can view only

view video footage in

104. the archive

     Live in Armed mode

You

105. User can view video from the camera only when the camera is armed

     Live

You

106. User can view live video from the camera. Other functions and device configuration are not available

     Live/Archive

You

107. User can view live and recorded video from the camera.

You

108. User cannot arm/disarm/configure the camera
     Live/Archive/Control	All functions available.

You

109. User cannot configure the device
     Live/Archive/Control/Configure	All functions and

settings

110. device configuration available
     Microphone access	No access

You

111. User cannot listen to live

sound

112. audio: from the

video

113. camera

. You cannot listen to sound recordings from the archive

114. ; in the archive.  Audio recording to an exported file is not available

     Live Audio

You

115. User can listen to live

sound

116. audio from the

video

117. camera (the microphone

should

118. must be turned on).

You

119. User cannot listen to

sound recordings from

120. audio in the archive
     Live Audio and Archive	All functions are available
     PTZ priority	No access

You

121. User cannot control the PTZ device

     Minimum level

You

122. User can control the PTZ device with the corresponding priority (see Controlling a PTZ

Camera

123. camera)
     	Low level
     	Medium level
     	High level
     	Maximum level

Archive

124. On the Groups tab, configure the Group permissions if there are camera groups (see Configuring video camera groups).
     

     Device	Access level	Description
     Group permissions		Configure group access permissions to cameras (see Types of permissions to access hardware, archives and macros)
     Camera group	Inherited	Access permissions are inherited from the Default permissions tab → Camera access
     	No access

Access is not provided to this archiveFull accessArchive is available for all function

125. No access to the device
     Archive only	User can view only the archive
     Live in Armed mode	User can view video from the camera only when the camera is armed
     Live	User can view live video from the camera. Other functions and device configuration are not available
     Live/Archive	User can view live and recorded video from the camera. User cannot arm/disarm/configure the camera
     Live/Archive/Control	All functions available. User cannot configure the device
     Live/Archive/Control/Configure	All functions and device configuration available

126. If necessary, configure the access permissions to a specific device on the Devices tab.
     To do this, select the access level for a specific device (see Types of permissions to access hardware, archives and macros). 
     

     Access level	Device	Access level to device
     Inherited	Camera	Access levels are inherited from the Default permissions tab →Groups or from the group permissions
     	Microphone	Access levels are inherited from the Default permissions tab → Groups
     	PTZ
     Archive only	Camera

You can configure group permissions to access devices and archives of a particular Server. To do so, select an access level for the Server object. Depending on the selected level, particular access levels are automatically configured for the devices and archives of the relevant Server:

Server access level

Device/archive

Device/archive access level

Custom

-

Access levels for devices and archives are set manually

No access

-

No access to devices and archives

Archive OnlyVideo camera

127. 	Archive only
     Microphone	Live

Audio

128. audio and

Archive

129. archive
     PTZ	Medium level

ArchiveFull access

130. Live in Armed

Mode

131. mode

Video camera

132. Camera

     View in armed mode

You can view armed cameras

133. Microphone	Live

Audio.

134. audio
     PTZ	Medium level

.

Archive

No access

135. Live

Video camera

136. Camera

     View

You can view

137. live video
     Microphone	Live

Audio

138. audio
     PTZ	Medium level

Archive

No access

139. Live/Archive

Video camera

You can view live and recorded video

140. 	Camera	View live video and archive
     	Microphone	Live

Audio

141. audio and

Archive

142. archive
     PTZ	Medium level

Archive

Full access

143. Live/Archive/Control

Video camera

144. Camera

     All functions

. Configuration not

145. , configuration isn't available
     Microphone	Live

Audio

146. audio and

Archive

147. archive
     PTZ	Medium level

Archive

Full access

148. Live/Archive/Control/Configure

Video camera

149. Camera

 

150. All functions

+ configuration 

151. , configuration is available

     Microphone

 Live Audio

152. Live audio and

Archive

153. archive

     PTZ

 Maximum

154. Maximum level

Archive
 Full access

156. You can

select

157. specify the access level

of access

158. to

one

159. a specific camera and extend it to other cameras. To do

it

160. this, do the following:
     

     1. Select the access level
for
161. 1. to a camera from a drop-down list on the Devices tab.

     2. Click the

Image Removed

162. 1. Image Added button and select the cameras

the same settings should be applied to.
Image Removed

163. 1. , to which you want to specify the same access level.
        Image Added

     2. Click the Apply button.

     As a result, the specified access level is extended to the selected cameras.
     To quickly select multiple cameras,

hold

164. press down the Shift key, select the first and last camera

the settings should be applied to. Selecting any camera from the highlighted ones will result in selecting them all. 

165. , to which you want to specify the same access level. The checkboxes set for all selected cameras when you select any of them.

     Info
     title Note
     Similarly, you can extend the access levels to microphones, PTZ devices and archives.

166. Configure the Default permissions to domain archives or Archive permissions to a specific archive in the Archives section.
     

     Device	Access level	Description
     Default permissions		Configure the default access permissions to the archive (see Types of permissions to access hardware, archives and macros)
     Archive access	No access	No access to this archive
     	Full access	Full access to the archive
     Archive permissions		Configure the permissions to a specific archive (see Types of permissions to access hardware, archives and macros)
     Archive	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to this archive
     	Full access	Full access to the archive

      
167. Configure the Default permissions to macros or Macro permissions to a specific macro in the Macros section
Select the appropriate access level to set the possibility to manually run all or some macros (see Configuring Macros) from the Layouts interface (11)
168. .

     Note
     title Attention!

By default, created macros are available only to users from the admin group.

169. Users outside the admin

group can

170. role can create macros, if they have the permissions to create them. They cannot use them until they have the permissions to use them.

Macros access level

171. Macro type	Access

permission

172. level	Description

No access
Automatic rules

173. Default permissions		Configure the default permissions to macros (see Types of permissions to access hardware, archives and macros)
     Macro access	No access

No

174. No access to macros


Event rulesCycle rules

175. Full access	Full access to macros
     Macro permissions		Configure the access permissions to a specific macro (see Types of permissions to access hardware, archives and macros)

Custom

176. Automatic rules

YesNoEvent rulesYesNoCycle rulesYesNoFull accessAutomatic rulesYes

177. Inherited

     Access

permission for macros is set manually


178. level is inherited from the Default permissions tab
     No access	No access to macros
     Full access	Full access to macros
     Event rules	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to macros
     	Full access	Full access to macros
     Cycle rules	Inherited	Access level is inherited from the Default permissions tab
     	No access	No access to macros
     	Full access

179. Full access to macros

Event rulesCycle rules

180. Click the Apply

 button

181. Image Added button to save the

role

182. changes.

The A new role has been is created.

Copying a role

You can copy a role. To do itthis, do the following:

Select
1. Click the name of the role that you want to copy.
2. Click the Create button.

A new role will be is created with the same parameters as the selected role.

Removing a role

To delete remove a role, do the following:

1. Select the role that you want to

delete

2. remove.

3. Click the

Delete

4. Remove Image Added button.


   Info
   title Note
   You cannot delete a role if the user who is logged in belongs to that role.

5. Click the Apply Image Added button
to save the changes
6. .

The role has been deletedis removed. All users who belong to this role will are also be deletedremoved.