All Collections
Command
Users and permissions
Detailed Role Breakdown for Command Users
Detailed Role Breakdown for Command Users
Features and configurations available to users and groups with different roles
Updated over a week ago

Permissions are set using roles, which define the level of access users and groups have to devices and settings within an organization and its sites/sub-sites. Below is a detailed breakdown of all roles that can be assigned to users and groups. For an overview of the Verkada permissions model, please see User Permissions Overview. For step-by-step instructions on setting permissions, please see Setting Permissions.

Organization-Level Roles

Organization-level roles are configured on a per-user basis. Groups cannot be used to set organization-level roles.

Organization member

All users added to an organization are organization members. A user added to the organization who has not been made an Organization Admin has the minimum level of access needed to sign in to the organization. Capabilities include being able to:

  • View the organization when logged in

  • Configure personal notifications (which alerts the user would like to receive)

  • Set personal 2FA settings

Organization Admin

Any organization member can be upgraded to an Organization Admin. Capabilities include being able to:

  • View the organization when logged in

  • Configure personal notifications (which alerts the user would like to receive)

  • Set personal and org-wide 2FA settings

  • Create floor plans

  • Add, delete, and modify access users

  • Set user and group permissions for the organization and all sites/sub-sites

  • Configure organization-wide settings including maximum archive duration, enable/disable cloud backup globally, and default camera playback quality

  • Rename or delete the organization

  • Create new sites and sub-sites

  • Add and remove cameras to the organization

Access Admin

  • View the access control portion of Command

  • Add and modify users for access control

  • Delete users for access control if also an Organization Admin

  • Grant and revoke Access Admin/Manager privileges

  • Add/modify/delete access groups

  • Add/modify/delete door schedules and exceptions

  • Add/modify/delete buildings

  • Configure org-wide access settings

  • Add/view/delete all sites if also an Organization Admin

  • If an Organization Admin, can make users Site Access Admins for any site

Access Manager

Access Managers have limited capabilities of Access Admins. Their capabilities include being able to:

  • View the access portion of Command

  • Create, view, modify, and deactivate access users

  • Delete access groups

  • Add/remove users from access groups

  • Add/view/delete all sites if also an Organization Admin

  • Remove Site Access Admins from sites if also an Organization Admin

Site Access Admin

Site Access Admins are able to interact with the doors and controllers they have permissions for. Access Admins are able to do more than Access Managers.

Site Access Admins with Access Manager privileges can:

  • View live door events

  • View reports (only for doors in assigned sites)

  • View door history and door schedules

  • View user history (only for doors in assigned sites)

  • Change a door schedule to an existing schedule

  • Unlock doors they have access to from Command

Site Access Admins with Access Admin privileges can do everything an Access Manager can do, along with:

  • Add/remove Site Access Admins

  • Delete the access site

  • Add/remove devices

  • Add/modify/remove doors (only for doors in assigned sites)

  • Add/modify/delete access levels and access exceptions

  • Create/modify/view door schedules

Site-level Roles

Site-level roles can be assigned to individual users or to groups and pertain to a specific site or sub-site. Remember that sub-sites inherit the permissions from the sub-sites and parent sites above them.

No Access

Users and groups will have no access to the site or sub-site's camera live feeds, historical video, or archives.

Site Live-Only Viewer

Permits users to only view live streams (no access to historical video) of the cameras within the site/sub-site. Capabilities include being able to:

  • View individual camera live streams

  • Utilize digital zoom

  • Create and view grids

  • View floor plans

Site Viewer

Site Viewers can access live and recorded footage for cameras within the site or sub-site. Capabilities include being able to:

  • View live streams

  • Utilize digital zoom

  • View historical video

  • Perform motion searches

  • View camera settings

  • View camera stats

  • Take live feed snapshots

  • Archive and download video (non-private archives only)

Site Admin

Site Admins can access live and recorded footage for cameras within the sites/sub-sites they have permissions for and can also configure site/sub-site permissions and camera settings. Capabilities include. being able to:

  • Add, delete and set user permissions on a site (user must be added to org first)

  • Add cameras to the organization and to sites for which the user is Site Admin

  • Remove cameras from the organization only from sites for which the user is Site Admin

  • Create, rename, and delete sites and sub-sites

  • View live streams

  • Share live links (SMS and Link)

  • View historical video

  • Perform motion searches

  • Take live feed snapshots

  • Archive video and download as mp4 (private and non-private archives)

  • Configure camera settings including name, orientation, and location

  • Utilize auto and manual focus

  • Utilize optical and digital zoom

  • Access and configure additional settings including custom focal point, cloud backup, motion events, and audio

  • Create camera embeds

  • View camera stats

Note: Site Admins cannot edit sites or subsites they have not been granted permissions for.

Alarm User Permissions

The ability to arm/disarm alarm sites can be explicitly granted to users of any level of access. For example, Site Admins by default have explicit permissions to arm/disarm a Site. Site Viewers, Live-Only Viewers, and even No Access users can be granted the ability to arm/disarm an alarm site denoted by the Alarms checkbox.

Alarm Site Admin

  • By default can arm/disarm sites via Command and the Alarms mobile app

  • Set up new alarm sites and change all alarm site settings

  • View all alarm activity and event history with historical video

  • Add/delete new devices and wired inputs/outputs in the alarm site

  • Listen in and initiate talk-downs to the alarm console

Alarm Site Viewers

  • By default do not have the ability to arm/disarm alarm sites

  • View all alarm activity and event history with historical video

  • Listen in and initiate talk-downs to the alarm console

Live-Only Viewers

  • By default do not have the ability to arm/disarm alarm sites

  • Can see live video and new events on the alarm site page

No Access Users

  • By default do not have the ability to arm/disarm

  • Unable to view any details regarding alarm sites in Command

  • If explicitly granted alarm user permissions they will have the ability to arm/disarm an alarm site from the Alarms Mobile app.


    Visit Training Center for bite-sized video tutorials on how to accomplish role-based tasks in Command.

Did this answer your question?