Permissions are set using roles, which define the level of access users and groups have to devices and settings within the organization and its sites/sub-sites. Below is a detailed breakdown of all roles that can be assigned to users and groups. For an overview of the Verkada permissions model, please see User Permissions Overview. For step-by-step instructions on setting permissions, please see Setting Permissions.

Organization-level Roles

Organization-level roles are configured on a per-user basis. Groups cannot be used to set Organization-level roles.

Organization member

All users added to an organization are organization members. A user added to the organization who has not been made an Organization Admin has the minimum level of access needed to sign in to the organization. Capabilities include:

  • View the organization when logged in

  • Configure personal notifications (which alerts the user would like to receive)

  • Set personal and org wide 2FA settings

Organization Admin

Any Organization member can be upgraded to an Organization Admin. Capabilities include:

  • View the organization when logged in

  • Configure personal notifications (which alerts the user would like to receive)

  • Set personal and org wide 2FA settings

  • Create Floor Plans

  • Add, delete, and modify access users

  • Set user and group permissions for the organization and all sites/sub-sites

  • Configure organization-wide settings including Maximum Archive Duration, Enable/Disable Cloud Backup Globally, and Default Camera Playback Quality

  • Rename or delete the organization

  • Create new sites and sub-sites

  • Add and remove cameras to the organization

Access Admin

  • View Access portion of Command

  • Add/modify/delete users for access control.

  • Grant and revoke access admin privileges

  • Add/modify/delete access groups

  • Add/modify/delete door schedules and exceptions

  • Add/modify/delete buildings

  • Configure org wide access settings

  • Add/view/delete all sites if also org admin

  • If org admin they can make users site access admins for any site

Access Manager

Access managers are limited capability access admins. Their capabilities are:

  • View access portion of Command

  • View and modify access users. If organization admin, can create and delete access users

  • Add/remove users from access groups

  • Add/view/delete all sites if org admin

  • Remove site access admins from sites if org admin

Site Access Admin

Site Access Admins are able to interact with the doors and controllers they are site admin for. Access Admins are able to do more than Access Managers.

Site Access Admins with Access Manager privileges can:

  • View live door Events

  • View reports (only for doors in assigned sites)

  • View door history and door schedules

  • View user history (only for doors in assigned sites)

  • Change a door schedule to an existing schedule

  • Unlock doors they have access to from Command

Site Access Admins with Access Admin privileges can do everything an Access Manager can do, along with:

  • Add/remove Site Access Admins

  • Delete the access site

  • Add/remove devices

  • Add/modify/remove doors (only for doors in assigned sites)

  • Add/modify/delete access levels and access exceptions

  • Create/modify/view door schedules

Site-level Roles

Site-level roles can be assigned to individual users or to groups and pertain to a specific site or sub-site. Remember that sub-sites inherit the permissions from the sub-sites and parent site above them.

No Access

Users and groups will have no access to the site or sub-site's camera live feeds, historical video, or archives.

Site Live-Only Viewer

Permits users to ONLY view live streams (no access to historical video) of the cameras within the site/sub-site. Capabilities include:

  • View individual camera live streams

  • Utilize digital zoom

  • Create and view grids

  • View floor plans

Site Viewer

Site Viewers can access live and recorded footage for cameras within the site or sub-site. Capabilities include:

  • View live streams

  • Utilize digital zoom

  • View historical video

  • Perform motion searches

  • View camera settings

  • View camera stats

  • Take live feed snapshots

  • Archive and download video (non-private archives only)

Site Admin

Site Admins can access live and recorded footage for cameras within the site/sub-site, as well as configure site/sub-site permissions and camera settings. Capabilities include:

  • Add, delete and set user permissions on a site or sub-site (user must be added to org first)

  • Add cameras to the organization

  • Change site or sub-site name

  • Delete the site and sub-sites

  • View live streams

  • Share live links (SMS and Link)

  • View historical video

  • Perform motion searches

  • Take live feed snapshots

  • Archive video and download as mp4 (private and non-private archives)

  • Configure camera settings including Name, Orientation, and Location

  • Utilize auto and manual focus

  • Utilize optical and digital zoom

  • Access and configure Additional Settings including Custom Focal Point, Cloud Backup, Motion Alerts, Audio and Reboot

  • Create camera embeds

  • View camera stats

Alarm User Permissions

The ability to arm/disarm Alarm Sites can be explicitly granted to users of any level of access. For example, Site Admins by default have explicit permissions to arm/disarm a Site. Site Viewers, Live-Only Viewers and even No access users can be granted the ability to arm/disarm an Alarm Site denoted by the Alarm User Checkbox.

Alarm Site Admin

  • By default can arm/disarm sites via Command and the Alarms mobile app.

  • Set up new alarm sites and change all alarm site settings.

  • View all Alarm activity and event history with historical video

  • Add/delete new devices and wired inputs/outputs in the alarm site.

  • Listen in and initiate talk-downs to the Alarm console.

Alarm Site Viewers

  • By default do not have the ability to arm/disarm alarm sites

  • View all Alarm activity and event history with historical video

  • Listen in and initiate talk-downs to the Alarm console.

Live-Only Viewers

  • By default do not have the ability to arm/disarm alarm sites

  • Can see live video and new events on the alarm site page.

No Access Users

  • By default do not have the ability to arm/disarm

  • Unable to view the any details regarding alarm sites in Command.

  • If explicitly granted Alarm User permissions they will have the ability to arm/disarm an Alarm site from Alarms Mobile app.

Did this answer your question?