Privilege Profile
In User > Privilege Profile, privilege profiles are used to control users' permissions to access Surveillance Station objects and perform specific tasks.
Privilege Profiles & Privilege Types
Default Privilege Profiles
- Administrator: Allows users to access all objects and manage Surveillance Station settings.1
- All-Object Manager: Allows users to access all objects and manage basic Surveillance Station settings (excluding User, License, Server, and VisualStation settings).
- All-Object Spectator: Allows users to access all objects in Surveillance Station but restricts management of Surveillance Station settings.
Note:
- For Surveillance Station administrators that are NOT in DSM administrator group, certain actions that involve changing DSM settings are restricted. See the limitations below:
Items | Permitted Actions | Restricted Actions |
---|---|---|
List (User) | Modify an existing user’s privilege profile and user photo, and edit the account activation schedule |
|
Group (User) | Edit the privilege profile of an existing group | Add, delete, or edit description of a group |
Storage (Recording > Archive Settings) | View storage list | Add, delete, or edit storage |
System | See Information and Security tab | See Storage, Network, Time, System Update tab |
Privilege Types
- Manager: Can manage, operate, and view authorized objects.
- Spectator: Can operate and view authorized objects but cannot manage them.
Object and Advanced Privileges
- Server:
- Users without the privilege cannot access cameras and I/O modules on the server.
- Users without the privilege cannot access layouts in Monitor Center on the server.
- Users without the privilege cannot select the server in the filters in the Log and Recording applications.
- Camera:
- Available privileges include live view, recording playback, lens control, audio, and digital output.
- Managers have access to authorized cameras.
- Spectators' privileges to cameras can be configured individually.
- With live view privileges, spectators can view the authorized camera’s counting task in the Live Counting function.
- With playback privileges, spectators can view the authorized camera’s counting task in the Report function.
- Users with the privilege to a camera group can access all the included cameras.
- Maps:
- Managers can edit and view authorized maps.
- Spectators can have edit or view-only privileges to authorized maps.
- Layout:
- Managers can edit and view authorized layouts.
- Spectators can have edit or view-only privileges to authorized layouts.
- Users without the privilege to any layouts cannot view videos in Monitor Center.
- I/O module:
- Managers can edit and view authorized I/O modules.
- Spectators can have view-only privileges to authorized I/O modules.
- Door:
- Available privileges include authorized, manual lock, manual unlock, and manual access.
- Managers' privilege to controllers, cardholders, access rules, and logs can be configured in the Advanced settings.
- Spectators' privilege for viewing door controllers, downloading logs, and other related services can be configured in the Advanced settings.
- IP Speaker:
- Managers can edit and view authorized speakers.
- Spectators can have view-only privileges to authorized speakers.
- Advanced:
- Available privileges to tasks and applications can be configured here.
- Managers without the privilege to play recordings cannot view recordings in the Recording application.
Note:
- Only administrators can access the following applications: Action Rule, Application Center, Archive Vault, Audio Pattern, C2 Backup for Surveillance, Camera Group, CMS, Dual Authorization, Home Mode, License, Resource Monitor, System, User, and Live Broadcast.
To create a privilege profile:
- Click Add.
- In the Information page, enter a name, description, and select a privilege type.
- Follow the wizard and tick the Authorized checkboxes to assign privileges.
Note:
- The archived recordings of deleted cameras can be included.
To edit a privilege profile:
- Select a privilege profile and click Edit.
- Make changes and click Apply.
To delete a privilege profile:
Select a privilege profile and click Delete.