Privilege Profile
You can grant users the right to access Surveillance Station objects (e.g. cameras, I/O module, door, speakers, e-maps, layouts) and perform specific tasks by creating privilege profiles. Log in to Surveillance Station as a user belonging to the administrators group to manage privilege profiles.
The User > Privilege Profile tab shows a list of privilege profiles, and you can edit a selected profile to see more details.
Default Privilege Profiles
- All-Object Manager: This profile allows users to access all objects and manage basic Surveillance Station settings, except for settings in the User, License, Server, and VisualStation pages.
- All-Object Spectator: This profile allows users to access all objects in Surveillance Station. However, users with this profile are not allowed to manage Surveillance Station settings.
Privilege Types
- Manager: Can manage, operate, and view authorized objects.
- Spectator: Can operate and view authorized objects, but cannot manage them.
Object and Advanced Privileges
- Server:
- Users without privileges of a server will not be able to access cameras, I/O modules on such server.
- Users without privileges of a server will not be able to access layouts in Live View and Timeline applications on such server.
- Users without privileges of a server will not be able to select such server in filter settings of Log and Recording applications.
- Camera:
- Managers can gain access to the live view and audio of authorized cameras, camera settings, and lens control. Their privileges of recording playback can be managed in the Advanced tab.
- Spectators' privileges to access each camera, including its live view, recording playback, lens control and audio, can be configured individually.
- A user that has privileges to a camera group can access all cameras belonging to this camera group.
- I/O module:
- Managers can edit and view authorized I/O modules.
- Spectators can have view-only privileges in authorized I/O modules.
- Door:
- For each door, you can authorize manual lock, manual unlock, or manual access privilege(s) to any associated user by checking the corresponding box.
- In the Advanced tab, you can authorize door controllers, cardholders, access rules, and log related privileges to managers.
- In the Advanced tab, you can authorize privileges to Spectators for viewing door controllers, downloading logs, and other related privileges.
- IP Speaker:
- Managers can edit and view authorized speakers.
- Spectators can have view-only privileges in authorized speakers.
- E-Map:
- Managers can edit and view authorized e-maps.
- Spectators can have edit or view-only privileges in authorized e-maps.
- Layout:
- Managers can edit and view authorized layouts.
- Spectators can have edit or view-only privileges in authorized layouts.
- If a user has no authorized layouts, this user will be unable to watch video feeds and perform operations on the Live View and Timeline pages.
- Advanced:
- Privileges to perform additional tasks can be configured here.
- The privilege to download recordings includes taking snapshots of, downloading, and exporting recordings.
- If a manager has no playback privileges, he will not be able to play recordings even if he sees them listed on the Recording page.
Note:
- Only users belonging to the administrators group can add or delete objects and change system settings.
- Only users belonging to the administrators group can modify notification service settings at Notification.
To create a new privilege profile:
- Open User.
- Under the Privilege Profile tab, click the Add button to create a new privilege profile.
- Under Information, enter a name for this privilege profile, and then select a privilege type from the Type drop-down menu.
- You can customize privileges for each Surveillance Station object: Server (CMS host only), Camera, I/O module, Access controller, E-map, Speaker, Layout, and Advanced.
- Click Finish to apply your settings.
Note:
- Remaining video archives of deleted cameras can be selected here.
To edit a privilege profile:
- Go to User > Privilege Profile, and then select the profile you want to edit.
- Make changes to the settings.
- Click Save to apply your changes
To delete a privilege profile:
- Go to User > Privilege Profile, and then select the profile you want to delete.
- Click on the Delete button and then click Yes.
To apply privilege profiles to DSM users:
- Go to User > List, and then select the user(s) to whom you want to apply a privilege profile. You can use the Ctrl or Shift keys for multiple selections.
- Right-click on the chosen user(s) and select Edit Privilege, or simply click Privilege on the bar above to select the privilege profile to apply to the user in the Edit Privilege page.
To apply privilege profiles to DSM groups:
- Go to User > Group, and then select the group(s) to whom you want to apply a privilege profile. You can use the Ctrl or Shift keys for multiple selections.
- Right-click on the chosen group(s) and select Edit Privilege, or simply click Privilege on the bar above to select the privilege profile to apply to the group in the Edit Privilege page.
Note:
- Only an account belonging to the administrators group can apply privilege profile to DSM users and groups.