Permissions are set using roles, which define the level of access users and groups have to devices and settings within the organization and its sites/sub-sites. Below is a detailed breakdown of all roles that can be assigned to users and groups. For an overview of the Verkada permissions model, please see User Permissions Overview. For step-by-step instructions on setting permissions, please see Setting Permissions.

Organization-level Roles

Organization-level roles are configured on a per-user basis. Groups cannot be used to set Organization-level roles.

Organization member

All users added to an organization are organization members. A user added to the organization who has not been made an Organization Admin has the minimum level of access needed to sign in to the organization. Capabilities include:

  • View the organization when logged in

  • Configure personal notifications (which alerts the user would like to receive)

  • Set personal 2FA settings

Organization Admin

Any organization member can be upgraded to an Organization Admin. Capabilities include:

  • View the organization when logged in

  • Configure personal notifications (which alerts the user would like to receive)

  • Set personal and org-wide 2FA settings

  • Create Floor Plans

  • Add, delete, and modify access users

  • Set user and group permissions for the organization and all sites/sub-sites

  • Configure organization-wide settings including maximum archive duration, enable/disable cloud backup globally, and default camera playback quality

  • Rename or delete the organization

  • Create new sites and sub-sites

  • Add and remove cameras to the organization

Access Admin

  • View Access portion of Command

  • Add/modify/delete users for access control

  • Grant and revoke access admin privileges

  • Add/modify/delete access groups

  • Add/modify/delete door schedules and exceptions

  • Add/modify/delete buildings

  • Configure org-wide access settings

  • Add/view/delete all sites if also Organization Admin

  • If an Organization Admin they can make users Site Access Admins for any site

Access Manager

Access Managers have limited capability Access Admins. Their capabilities are:

  • View access portion of Command

  • View and modify access users. If an Organization Admin they can create and delete access users

  • Add/remove users from access groups

  • Add/view/delete all sites if Organization Admin

  • Remove Site Access Admins from sites if Organization Admin

Site Access Admin

Site Access Admins are able to interact with the doors and controllers they are a Site Admin for. Access Admins are able to do more than Access Managers.

Site Access Admins with Access Manager privileges can:

  • View live door Events

  • View reports (only for doors in assigned sites)

  • View door history and door schedules

  • View user history (only for doors in assigned sites)

  • Change a door schedule to an existing schedule

  • Unlock doors they have access to from Command

Site Access Admins with Access Admin privileges can do everything an Access Manager can do, along with:

  • Add/remove Site Access Admins

  • Delete the access site

  • Add/remove devices

  • Add/modify/remove doors (only for doors in assigned sites)

  • Add/modify/delete access levels and access exceptions

  • Create/modify/view door schedules

Site-level Roles

Site-level roles can be assigned to individual users or to groups and pertain to a specific site or sub-site. Remember that sub-sites inherit the permissions from the sub-sites and parent site above them.

No Access

Users and groups will have no access to the site or sub-site's camera live feeds, historical video, or archives.

Site Live-Only Viewer

Permits users to only view live streams (no access to historical video) of the cameras within the site/sub-site. Capabilities include:

  • View individual camera live streams

  • Utilize digital zoom

  • Create and view grids

  • View floor plans

Site Viewer

Site Viewers can access live and recorded footage for cameras within the site or sub-site. Capabilities include:

  • View live streams

  • Utilize digital zoom

  • View historical video

  • Perform motion searches

  • View camera settings

  • View camera stats

  • Take live feed snapshots

  • Archive and download video (non-private archives only)

Site Admin

Site Admins can access live and recorded footage for cameras within the site/sub-site, as well as configure site/sub-site permissions and camera settings. Capabilities include:

  • Add, delete and set user permissions on a site (user must be added to org first)

    Note: Site Admins cannot create sub-sites

  • Add cameras to the organization (only for sites they are admins for)

  • Change site or sub-site name

  • Delete the site and sub-sites

  • View live streams

  • Share live links (SMS and Link)

  • View historical video

  • Perform motion searches

  • Take live feed snapshots

  • Archive video and download as mp4 (private and non-private archives)

  • Configure camera settings including Name, Orientation, and Location

  • Utilize auto and manual focus

  • Utilize optical and digital zoom

  • Access and configure Additional Settings including Custom Focal Point, Cloud Backup, Motion Alerts, Audio, and Reboot

  • Create camera embeds

  • View camera stats

Alarm User Permissions

The ability to arm/disarm alarm sites can be explicitly granted to users of any level of access. For example, Site Admins by default have explicit permissions to arm/disarm a Site. Site Viewers, Live-Only Viewers, and even No Access users can be granted the ability to arm/disarm an alarm site denoted by the Alarm User Checkbox.

Alarm Site Admin

  • By default can arm/disarm sites via Command and the Alarms mobile app

  • Set up new alarm sites and change all alarm site settings

  • View all alarm activity and event history with historical video

  • Add/delete new devices and wired inputs/outputs in the alarm site

  • Listen in and initiate talk-downs to the alarm console

Alarm Site Viewers

  • By default do not have the ability to arm/disarm alarm sites

  • View all alarm activity and event history with historical video

  • Listen in and initiate talk-downs to the alarm console

Live-Only Viewers

  • By default do not have the ability to arm/disarm alarm sites

  • Can see live video and new events on the alarm site page

No Access Users

  • By default do not have the ability to arm/disarm

  • Unable to view any details regarding alarm sites in Command

  • If explicitly granted alarm user permissions they will have the ability to arm/disarm an alarm site from the Alarms Mobile app.

Did this answer your question?