Roles and Permissions

Set roles and permissions for Command users

This article describes the set of roles and associated permissions for Verkada Command.

As of April 16, 2026, Command organizes roles by scope first (organization, user management, site) and then by product area within each scope. This replaces the previous model that grouped roles primarily by product. See roles and permissions in each product area for more information.

Roles and permissions by Verkada product

All users added to the organization can log in to Command, but need additional permissions to view all the products. Select a product from the list below for more information on its roles and permissions.

• Roles and Permissions for Access Control
• Roles and Permissions for Air Quality Sensors
• Roles and Permissions for Alarms
• Roles and Permissions for Classic Alarms
• Roles and Permissions for Cameras
• Roles and Permissions for Intercom
• Roles and Permissions for Gateway
• Roles and Permissions for Guest
• Roles and Permissions for Mailroom

---

Organization-level roles

Organization roles apply across the entire Command organization and are not tied to a specific site. They control broad platform access, such as organization-wide settings, Access Control at the organization level, alerts, operations, and similar areas.

Organization Admin

Any organization member can be upgraded to an Organization Admin.

Access allows you to:

• View the organization when logged in.
• Configure personal notifications (which alerts the user wants to receive).
• Set personal and org-wide 2FA settings.
• Create floor plans.
• Add, delete, and modify access users.
• Set user and group permissions for the organization and all sites/subsites.
• Configure org-wide settings, including maximum archive duration, enable/disable cloud backup globally, and default camera playback quality.
• Rename or delete the org.
• Create new sites and subsites.
• Add and remove devices.
• Adjust camera stream encoding settings.

If the Global Site Admin policy is enabled, all Org Admins will automatically be granted Site Admin access to all sites.

Organization member

All users added to an organization are organization members. A user added to the organization who does not have admin permissions has the minimum level of access needed to sign in to the organization.

Access allows you to:

• View the organization when logged in.
• Configure personal notifications (which alerts the user wants to receive).
• Set personal 2-Factor Authentication (2FA) settings.

User management roles

User management roles control who can manage people and identity in Command, such as creating or editing users and groups and assigning admin-level roles, often scoped to directories or the full organization. They are separate from organization roles to distinguish who can manage devices (for example, cameras) from who can manage users.

Command User Admin

Command User Admins cannot modify the Organization Admin role. They can assign or remove Command User Admins but cannot elevate or lower Organization Admin permissions.

Any organization member can be upgraded to a Command User Admin.

Command User Admin allows you to:

• Add and remove users, designate their roles, and assign them to groups.
• Add and remove groups and assign users to groups.
• Add and remove contacts for individuals outside of your organization.
• Create and assign alerts to groups and users in the organization.
• Manage and restrict access to Shared Links for users in the organization.
• Enable Support Access.

Command User Viewer

Command User Viewer allows you to:

• View users, their roles, and their groups.
• View groups, their roles, and their users.

Site roles

Site-level roles can be assigned to individual users or groups and apply only to a specific site. Subsites inherit permissions from parent sites above them in the hierarchy.

Command site roles overview

Command site roles include permissions across product suites, such as Cameras, Alarms, Sensors, Intercoms, and Gateways.

Site Admin

Cameras

Site Admins can access live and recorded footage for cameras within the sites for which they have permissions. They can also configure site permissions and camera settings.

Site Admins can:

• Add, remove, and manage user permissions on a site for existing users
• Add cameras to the organization and to any site where they are a Site Admin
• Delete cameras from the organization only from sites where they are a Site Admin
• Create subsites, rename, and delete sites and subsites.
• View live streams
• Share live links (SMS and link)
• View historical video
• Archive video and download as an MP4
• View non-private archives.

You need Org Admin permissions to view private archives.

• Perform motion searches
• Take live feed snapshots
• Configure camera settings
• Utilize auto and manual focus
• Utilize optical and digital zoom
• Create camera embeds
• View camera stats
• Has full access to controls and features, including Sentry Mode for PTZ cameras

Alarms

• Can create or edit an alarm site
• Can create and edit keycodes along with all other alarm configurations
• Can arm or disarm alarm sites or resolve an alarm via Command
• Can add or remove Verkada devices and wired inputs/outputs on the site
• Can view all alarm activity and event history with historical video
• If added as a response contact for the alarm site, they can resolve an alarm and disarm the site through the incident link and agent call

Air Quality Sensors

• Add or remove sensors, move them between sites you administer, and reboot hardware
• Turn triggers on or off, edit trigger settings and sensitivity, receive offline alerts for sensors on accessible sites, and link a context camera (requires Site Admin permissions for the camera's site)
• Download sensor readings as a CSV and, for supported SV25 units with the feature enabled, use live and recorded audio
• Pair dashboards with displays, share or delete dashboards, create tiles using sensor readings and time ranges, and remove tiles as needed
• View sensor readings across accessible sites, filter and sort readings by type and time range, and switch between sites

Gateway

• Open gateway details, run a speed test, and see connected devices
• Review power history, activity logs, and data graphs
• Set up alerts
• Claim, set up, manage, identify, reboot, and delete devices on the site
• Manage data licenses
• Open the gateway home page
• Run packet capture, power cycle ports, and switch a gateway to WAN mode
• Claim connected devices, change network settings, and toggle smart data usage

Intercom

• Receive calls with video
• See 24/7 live intercom video, even if not on an active call
• View historical video and events
• Unlock the door both during and outside of a call
• Unlock the door 24/7
• Talk down to the intercom
• Change Receivers and device settings

Site Viewer

Cameras

A Site Viewer can access live and recorded footage for cameras in the site.

Site Viewers can:

• View live streams
• Utilize digital zoom
• View historical video
• Perform motion searches
• View camera settings
• View camera stats
• Take live feed snapshots
• Archive and download video (non-private archives only)
• For PTZ cameras, a Site Viewer has full access to controls but limited access to features and settings

  • Can view existing settings
  • Cannot enable, disable, or edit Sentry Mode settings

Alarms

• If added as a response contact for the alarm site, they can resolve an alarm and disarm the site through the incident link and agent call

Air Quality Sensors

• View the sensors in the site
• View analytics values for the sensors in the site
• Toggle between different durations (live, today, this week, etc.)
• View dashboards

Gateway

• Open gateway details, run a speed test, and see connected devices
• Review power history, activity logs, and data graphs
• Set up alerts

Intercom

• Receive calls with video
• See 24/7 live intercom video, even if not on an active call
• View historical video and events

Live-Only Viewer

Cameras

Live-Only Viewers can only view live streams (no access to historical video) of the cameras in the site.

Live-Only Viewers can:

• View individual camera live streams
• Utilize digital zoom
• Create and view grids
• View floor plans
• Has no access to controls or Sentry Mode for PTZ cameras

Alarms

• If added as a response contact for the alarm site, they can resolve an alarm and disarm the site through the incident link and agent call

Intercom

• Receive calls with video
• See 24/7 live intercom video, even if not on an active call

See Roles and permissions by Verkada product for detailed site role and permissions information for specific products accessible from Command.

---

Set permissions

Users

Grant permissions

1. In Verkada Command, go to All Products > Admin.
2. Select Users & Permissions > Users.
3. Select a user to grant permissions.
4. Click Manage to the right of Organization Roles, User Management Roles, Site Roles, or Custom Roles.

   1. For site roles, select the relevant type (product-specific role or custom role).
   2. Select the role to grant to the user.
   3. Click Save.

Revoke permissions

1. In Verkada Command, go to All Products > Admin.
2. Select Users & Permissions > Users.
3. Select a user to revoke permissions.
4. Click Manage to the right of Organization Roles, User Management Roles, Site Roles, or Custom Roles.

   1. For site roles, select the relevant product.
   2. De-select the role to remove from the user.
   3. Click Save.

Groups

Granting permissions

1. In Verkada Command, go to All Products > Admin.
2. Select Users & Permissions > Groups.
3. Select a Command group to grant permissions.
4. At the top, click Roles.
5. Click Manage to the right of Organization Roles, User Management Roles, Site Roles, or Custom Roles.

   1. For site roles, select the relevant product.
   2. Select the role to grant to the group.
   3. Click Save.

Revoking permissions

1. In Verkada Command, go to All Products > Admin.
2. Select Users & Permissions > Groups.
3. Select a Command group to revoke permissions.
4. At the top, click Roles.
5. Click Manage to the right of Organization Roles, User Management Roles, Site Roles, or Custom Roles.

   1. For site roles, select the relevant type (product-specific role or custom role).
   2. De-select the role to remove from the group.
   3. Click Save.

---

FAQ

Why has my organization disappeared?

A user must be a member at the organization level to see the organization in the dropdown when they log in. If a user is a member of an organization, they appear on the user list that Organization Admins and Site Admins can access in Command.

If your organization disappeared, it can be due to one of these reasons:

• Your user account was removed from the organization.
• The organization was deleted.

Troubleshoot

• If you are the affected user, contact the Organization Admin and request to re-add you to the organization.
• If a user has reported this to you, verify they are a member of the organization.

Why are cameras missing from my organization?

Sites do not inherit users from the organization or other sites. Users who are members of the organization cannot see cameras unless they have explicitly been granted permissions to the site or sub-site where the cameras reside.

• If you are the affected user, contact the Organization Admin or Site Admin and request access to the desired sites and subsites.
• If a user has reported this to you, grant them access to the desired sites and subsites.

Why can’t I access certain features or settings, such as other users?

If you are unable to access certain features or settings, you don’t have sufficient permissions. Only Admins can access all features and settings.

Organization Admins are not automatically escalated to Site Admin for any site. This is a separate feature set. Therefore, Organization Admins do not inherently have permission to view any one particular site, but they can assign themselves the required roles to see their desired sites.

Troubleshoot tips:

• If you are the affected user, contact the Organization Admin or Site Admin and request that they elevate your permissions to Organization Admin or the desired site or subsite.
• If a user has reported this to you, elevate their permissions on the organization or desired site or subsite.

Prefer to see it in action? Check out the video tutorial.