This article provides an overview of the different user permissions, how they can be applied, and the features and configurations they allow access to.

When thinking about permissions, the most important concept to keep in mind is the difference among organization, site, and access control permissions:

  • Organization permissions have to do with user management (being able to access the organization, inviting users to the organization, etc.)
  • Site permissions define access to cameras.
  • Access control permissions determines who can view and manage access control devices.

Because organization, access control, and site permissions serve different purposes, they are separate. However, users will need to have permissions set for these levels to make full use of Command.

Organization and Site Permissions

Permissions are set at the following levels:

Organization
All users added to the organization have the ability to log in to the Command organization. Only those users designated as an Organization Admin may add/delete cameras, invite/delete other users, create sites, and modify all permissions.

Site
Site-level permissions define what access a particular user or group has to the cameras within the site. Site-level permissions are configured using Roles (No Access, Live-Only Viewer, Site Viewer, and Site Admin), which are described in more detail in the section 'Roles' below.

Sub-Site
Sub-site permissions are no different from site-level permissions. The only difference is that sub-sites inherit the permissions of the sub-sites and parent site above them.

Roles

There are four levels of access that a user or group may have to a site or sub-site:

  • Site Admin: Permits users to view cameras, add cameras, archive and share video, change camera settings, and edit site permissions.
  • Site Viewer: Permits users to view cameras, archive video, and take snapshots.
  • Live-Only Viewer: Permits users to ONLY view camera live streams (no access to historical, archives, or Live Link sharing).
  • No Access: Users will have no access to the site or sub-site's camera live feeds, historical video, or archives.

Access Control Permissions

Only access admins and managers are able to view the access control infrastructure. For full functionality of the access control devices, the access admins and managers should also be organization admins.

  • Access Admin: Permits full management of doors, controllers, access levels, access groups, and access users. Can view live and historical access events and run reports for historical events.
  • Access Manager: Permits addition and modification of access users, view doors, view live and historical access events, and run reports for historical events.

Please see the article Detailed Role Breakdown for an in-depth explanation of the features and configurations available to users or groups with different roles.

Permissions Considerations

  • Sites and sub-sites do not inherit permissions from the organization (i.e. being an Organization Admin does not automatically make you a Site Admin).
  • Sub-sites inherit permissions from all sub-sites (and the ultimate parent site) above them.
  • A user can be assigned to multiple groups. If permissions conflict, the user is always granted the highest role granted to them directly, or to one of the groups to which they belong. For example, if a user is assigned to a group which assigns the role Site Viewer for a particular site, but is also assigned to a group which assigns the role Site Admin for that same site, the user will be granted Site Admin permissions for that site.
  • Permissions can always be upgraded, but never downgraded. For example, if a user is assigned to a group which assigns the role Site Viewer for a particular site, that user may be manually upgraded to Site Admin for that site. However, this user cannot be downgraded to a Live-Only Viewer (or any role below Site Viewer). A user's role can only be downgraded if they are removed from the group which assigns the highest level of access.

Common User Permissions Configurations

Permit a user to be able to view, archive and take snapshots of footage:

  • User must be added to the organization
  • Site Viewer on appropriate sites or sub-sites

Permit a user to view, archive, share and take snapshots of footage and modify camera settings and set other users' permissions globally:

  • User must be added to the organization and made an Organization Admin
  • Site Admin on all appropriate sites or sub-sites

Permit a user to view, archive, share and take snapshots of footage and modify camera settings and set other users' permissions on certain cameras:

  • User must be added to the organization
  • Site Admin on all appropriate sites or sub-sites

Permit a user to only view live streams of cameras:

  • User must be added to the organization
  • Live-Only Viewer on all appropriate sites or sub-sites

Setting Permissions for Users

Please see our step-by-step guide on setting permissions.

Did this answer your question?