Permissions are set using roles, which define the level of access users and groups have to devices and settings within an organization and its sites/sub-sites. Below is a detailed breakdown of all roles that can be assigned to users and groups. For an overview of the Verkada permissions model, please see User Permissions Overview. For step-by-step instructions on setting permissions, please see Setting Permissions.
Organization-Level Roles
Organization-level roles are configured on a per-user basis. Groups cannot be used to set organization-level roles.
Organization member
All users added to an organization are organization members. A user added to the organization who has not been made an Organization Admin has the minimum level of access needed to sign in to the organization. Capabilities include being able to:
View the organization when logged in
Configure personal notifications (which alerts the user would like to receive)
Set personal 2FA settings
Organization Admin
Any organization member can be upgraded to an Organization Admin. Capabilities include being able to:
View the organization when logged in
Configure personal notifications (which alerts the user would like to receive)
Set personal and org-wide 2FA settings
Create floor plans
Add, delete, and modify access users
Set user and group permissions for the organization and all sites/sub-sites
Configure organization-wide settings including maximum archive duration, enable/disable cloud backup globally, and default camera playback quality
Rename or delete the organization
Create new sites and sub-sites
Add and remove cameras to the organization
Access Admin
View the access control portion of Command
Add and modify users for access control
Delete users for access control if also an Organization Admin
Grant and revoke Access Admin/Manager privileges
Add/modify/delete access groups
Add/modify/delete door schedules and exceptions
Add/modify/delete buildings
Configure org-wide access settings
Add/view/delete all sites if also an Organization Admin
If an Organization Admin, can make users Site Access Admins for any site
Access Manager
Access Managers have limited capabilities of Access Admins. Their capabilities include being able to:
View the access portion of Command
Create, view, modify, and deactivate access users
Delete access groups
Add/remove users from access groups
Add/view/delete all sites if also an Organization Admin
Remove Site Access Admins from sites if also an Organization Admin
Site Access Admin
Site Access Admins are able to interact with the doors and controllers they have permissions for. Access Admins are able to do more than Access Managers.
Site Access Admins with Access Manager privileges can:
View live door events
View reports (only for doors in assigned sites)
View door history and door schedules
View user history (only for doors in assigned sites)
Change a door schedule to an existing schedule
Unlock doors they have access to from Command
Site Access Admins with Access Admin privileges can do everything an Access Manager can do, along with:
Add/remove Site Access Admins
Delete the access site
Add/remove devices
Add/modify/remove doors (only for doors in assigned sites)
Add/modify/delete access levels and access exceptions
Create/modify/view door schedules
Site-level Roles
Site-level roles can be assigned to individual users or to groups and pertain to a specific site or sub-site. Remember that sub-sites inherit the permissions from the sub-sites and parent sites above them.
No Access
Users and groups will have no access to the site or sub-site's camera live feeds, historical video, or archives.
Site Live-Only Viewer
Permits users to only view live streams (no access to historical video) of the cameras within the site/sub-site. Capabilities include being able to:
View individual camera live streams
Utilize digital zoom
Create and view grids
View floor plans
Site Viewer
Site Viewers can access live and recorded footage for cameras within the site or sub-site. Capabilities include being able to:
View live streams
Utilize digital zoom
View historical video
Perform motion searches
View camera settings
View camera stats
Take live feed snapshots
Archive and download video (non-private archives only)
Site Admin
Site Admins can access live and recorded footage for cameras within the sites/sub-sites they have permissions for and can also configure site/sub-site permissions and camera settings. Capabilities include. being able to:
Add, delete and set user permissions on a site (user must be added to org first)
Add cameras to the organization and to sites for which the user is Site Admin
Remove cameras from the organization only from sites for which the user is Site Admin
Create, rename, and delete sites and sub-sites
View live streams
Share live links (SMS and Link)
View historical video
Perform motion searches
Take live feed snapshots
Archive video and download as mp4 (private and non-private archives)
Configure camera settings including name, orientation, and location
Utilize auto and manual focus
Utilize optical and digital zoom
Access and configure additional settings including custom focal point, cloud backup, motion events, and audio
Create camera embeds
View camera stats
Note: Site Admins cannot edit sites or subsites they have not been granted permissions for.
Alarm User Permissions
The ability to arm/disarm alarm sites can be explicitly granted to users of any level of access. For example, Site Admins by default have explicit permissions to arm/disarm a Site. Site Viewers, Live-Only Viewers, and even No Access users can be granted the ability to arm/disarm an alarm site denoted by the Alarms checkbox.
Alarm Site Admin
By default can arm/disarm sites via Command and the Alarms mobile app
Set up new alarm sites and change all alarm site settings
View all alarm activity and event history with historical video
Add/delete new devices and wired inputs/outputs in the alarm site
Listen in and initiate talk-downs to the alarm console
Alarm Site Viewers
By default do not have the ability to arm/disarm alarm sites
View all alarm activity and event history with historical video
Listen in and initiate talk-downs to the alarm console
Live-Only Viewers
By default do not have the ability to arm/disarm alarm sites
Can see live video and new events on the alarm site page
No Access Users
By default do not have the ability to arm/disarm
Unable to view any details regarding alarm sites in Command
If explicitly granted alarm user permissions they will have the ability to arm/disarm an alarm site from the Alarms Mobile app.
Visit Training Center for bite-sized video tutorials on how to accomplish role-based tasks in Command.