Privilege Profile

In User > Privilege Profile, privilege profiles are used to control users' permissions to access Surveillance Station objects and perform specific tasks.

Privilege Profiles & Privilege Types

Default Privilege Profiles

  • Administrator: Allows users to access all objects and manage Surveillance Station settings.1
  • All-Object Manager: Allows users to access all objects and manage basic Surveillance Station settings (excluding User, License, Server, and VisualStation settings).
  • All-Object Spectator: Allows users to access all objects in Surveillance Station but restricts management of Surveillance Station settings.

Note:

  1. For Surveillance Station administrators that are NOT in DSM administrator group, certain actions that involve changing DSM settings are restricted. See the limitations below:
Items Permitted Actions Restricted Actions
List (User) Modify an existing user’s privilege profile and user photo, and edit the account activation schedule
  1. Add, delete, activate, or deactivate users
  2. Edit user account settings including user name, description, or password
Group (User) Edit the privilege profile of an existing group Add, delete, or edit description of a group
Storage (Recording > Archive Settings) View storage list Add, delete, or edit storage
System See Information and Security tab See Storage, Network, Time, System Update tab

Privilege Types

  • Manager: Can manage, operate, and view authorized objects.
  • Spectator: Can operate and view authorized objects but cannot manage them.

Object and Advanced Privileges

  • Server:
    • Users without the privilege cannot access cameras and I/O modules on the server.
    • Users without the privilege cannot access layouts in Monitor Center on the server.
    • Users without the privilege cannot select the server in the filters in the Log and Recording applications.
  • Camera:
    • Available privileges include live view, recording playback, lens control, audio, and digital output.
    • Managers have access to authorized cameras.
    • Spectators' privileges to cameras can be configured individually.
      • With live view privileges, spectators can view the authorized camera’s counting task in the Live Counting function.
      • With playback privileges, spectators can view the authorized camera’s counting task in the Report function.
    • Users with the privilege to a camera group can access all the included cameras.
  • Maps:
    • Managers can edit and view authorized maps.
    • Spectators can have edit or view-only privileges to authorized maps.
  • Layout:
    • Managers can edit and view authorized layouts.
    • Spectators can have edit or view-only privileges to authorized layouts.
    • Users without the privilege to any layouts cannot view videos in Monitor Center.
  • I/O module:
    • Managers can edit and view authorized I/O modules.
    • Spectators can have view-only privileges to authorized I/O modules.
  • Door:
    • Available privileges include authorized, manual lock, manual unlock, and manual access.
    • Managers' privilege to controllers, cardholders, access rules, and logs can be configured in the Advanced settings.
    • Spectators' privilege for viewing door controllers, downloading logs, and other related services can be configured in the Advanced settings.
  • IP Speaker:
    • Managers can edit and view authorized speakers.
    • Spectators can have view-only privileges to authorized speakers.
  • Advanced:
    • Available privileges to tasks and applications can be configured here.
    • Managers without the privilege to play recordings cannot view recordings in the Recording application.

Note:

  • Only administrators can access the following applications: Action Rule, Application Center, Archive Vault, Audio Pattern, C2 Backup for Surveillance, Camera Group, CMS, Dual Authorization, Home Mode, License, Resource Monitor, System, User, and Live Broadcast.

To create a privilege profile:

  1. Click Add.
  2. In the Information page, enter a name, description, and select a privilege type.
  3. Follow the wizard and tick the Authorized checkboxes to assign privileges.

Note:

  • The archived recordings of deleted cameras can be included.

To edit a privilege profile:

  1. Select a privilege profile and click Edit.
  2. Make changes and click Apply.

To delete a privilege profile:

Select a privilege profile and click Delete.