Permissions are set using roles, which define the level of access users and groups have to devices and settings within an organization and its sites/subsites.
Use this article as a reference to all roles that can be assigned to users and groups. Learn more about the overview of the Verkada permissions model and how to set permissions.
Organization-level roles
Organization-level roles are configured on a per-user basis. Groups cannot be used to set organization-level roles. Click the arrow to the left of the role to learn more about the role and access.
Organization member
Organization member
All users added to an organization are organization members. A user added to the organization who has not been made an Organization Admin has the minimum level of access needed to sign in to the organization.
Access allows you to:
View the organization when logged in.
Configure personal notifications (which alerts the user wants to receive).
Set personal 2-Factor Authentication (2FA) settings.
Organization Admin
Organization Admin
Any organization member can be upgraded to an Organization Admin.
Access allows you to:
View the organization when logged in.
Configure personal notifications (which alerts the user wants to receive).
Set personal and org-wide 2FA settings.
Create floor plans.
Add, delete, and modify access users.
Set user and group permissions for the organization and all sites/subsites.
Configure organization-wide settings, including maximum archive duration, enable/disable cloud backup globally, and default camera playback quality.
Rename or delete the organization.
Create new sites and subsites.
Add and remove cameras to the organization.
Adjust camera stream encoding settings.
Access Admin
Access Admin
Access allows you to:
View the access control portion of Command.
Add and modify users for access control.
Delete users for access control if also an Organization Admin.
Grant and revoke Access Admin/Manager privileges.
Add/modify/delete access groups.
Add/modify/delete door schedules and exceptions.
Add/modify/delete buildings if also an Organization Admin.
Configure org-wide access settings.
Add/view/delete all sites if also an Organization Admin
If an Organization Admin, can make users Site Access Admins for any site.
Access Manager
Access Manager
Access Managers have limited capabilities of Access Admins. Access allows you to:
View the access portion of Command.
Create, view, modify, and deactivate access users.
Add/modify/delete access groups.
Add/remove users from access groups.
Add/view/delete all sites if also an Organization Admin.
Remove Site Access Admins from sites if also an Organization Admin.
Site Access Admin
Site Access Admin
Site Access Admins are able to interact with the doors and controllers they have permissions for. Access Admins are able to do more than Access Managers.
Site Access Admins with Access Manager privileges can:
View live door events.
View reports (only for doors in assigned sites).
View door history and door schedules.
View user history (only for doors in assigned sites).
Change a door schedule to an existing schedule.
Unlock doors they have access to from Command.
Site Access Admins with Access Admin privileges can do everything an Access Manager can do, along with:
Add/remove Site Access Admins.
Delete the access site.
Add/remove devices.
Add/modify/remove doors (only for doors in assigned sites).
Add/modify/delete access levels and access exceptions.
Create/modify/view door schedules.
Site-level roles
Site-level roles can be assigned to individual users or to groups and pertain to a specific site or subsite. Subsites inherit the permissions from the subsites and parent sites above them. Click the down arrow to the left of the role to learn more about the role and access.
No Access
No Access
Users and groups do not have access to the site or subsite's camera live feeds, historical video, or archives.
Site Live-Only Viewer
Site Live-Only Viewer
Permits users to only view live streams (no access to historical video) of the cameras within the site/subsite. Access allows you to:
View individual camera live streams.
Utilize digital zoom.
Create and view grids.
View floor plans.
Site Viewer
Site Viewer
Site viewers can access live and recorded footage for cameras within the site or subsite. Access allows you to:
View live streams.
Utilize digital zoom.
View historical video.
Perform motion searches.
View camera settings.
View camera stats.
Take live feed snapshots.
Archive and download video (non-private archives only).
Site Admin
Site Admin
Site Admins can access live and recorded footage for cameras within the sites/subsites they have permissions for and can also configure site/subsite permissions and camera settings. Access allows you to:
Add, delete, and set user permissions on a site (user must be added to org first).
Add cameras to the organization and to sites for which the user is Site Admin.
Remove cameras from the organization only from sites for which the user is Site Admin.
Create, rename, and delete sites and subsites.
View live streams.
Share live links (SMS and link).
View historical video.
Perform motion searches.
Take live feed snapshots.
Archive video and download as mp4.
Note: Site Admins can only view non-private archives. Organization Admin permissions are also needed to view private archives.
Configure camera settings including name, orientation, and location.
Utilize auto and manual focus.
Utilize optical and digital zoom.
Access and configure additional settings including custom focal point, cloud backup, motion events, and audio.
Create camera embeds.
View camera stats.
Note: Site Admins cannot edit sites or subsites they have not been granted permissions for.
Roles and permissions by product
For specific roles and permissions by product, see:
Roles and Permissions for Cameras
Roles and Permissions for Workplace (Guest and Mailroom)
Related resources
Visit the Verkada Training Center for bite-sized video tutorials on how to accomplish role-based tasks in Command
Need more help? Contact Verkada Support