# Roles and Permissions for Guest

This article describes the set of roles and associated permissions for Verkada Guest. For more information on roles and permissions for other Verkada product lines, see [Roles and Permissions for Command](/command/users-and-permissions/roles-and-permissions-for-command.md).

* **Site-level roles** determine the access a user or group has to devices in the site.
* **Org-level roles** allow users or groups to manage permissions and devices at a global level.
* **Permissions** are set using roles, which define the level of access users and groups have to devices and settings within an organization and its sites.

***

### Permissions considerations

* Subsites inherit permissions from all parent sites, including the ultimate parent.
* Users can belong to multiple groups. When roles conflict, the user receives the **highest role** granted directly or through any group.
* Group-assigned roles can be manually upgraded but not downgraded. Remove the user from the group with the higher role to downgrade their access.

At a high level, these are the permissions that can be granted to each Guest user:

<table><thead><tr><th width="201.9921875">Permission</th><th width="187" align="center">Workplace Site Viewer</th><th align="center">Workplace Site Admin</th><th align="center">Organization Admin</th></tr></thead><tbody><tr><td>View guest logs and analytics</td><td align="center">✅</td><td align="center">✅</td><td align="center">✅</td></tr><tr><td>Sign out users and print badges</td><td align="center">✅</td><td align="center">✅</td><td align="center">✅</td></tr><tr><td>Modify site-specific guest settings</td><td align="center"></td><td align="center">✅</td><td align="center">✅</td></tr><tr><td>Manage site-specific employee lists</td><td align="center"></td><td align="center">✅</td><td align="center">✅</td></tr><tr><td>Import and modify sites</td><td align="center"></td><td align="center">✅</td><td align="center">✅</td></tr></tbody></table>

Additionally, these Guest permissions are dependent on other roles or permissions which can be assigned through Command:

<table><thead><tr><th width="278.26171875">Permission</th><th>Dependent Role / Dependent Permission</th></tr></thead><tbody><tr><td>View live streams</td><td>User must have at least the <a href="/spaces/ylYKicREo6JpuOJH4teK/pages/FgHdADiBhPEQoyJpklM9#site-live-only-viewer">Live-only Viewer</a> role for the site.</td></tr><tr><td>View footage tied to visit logs</td><td>User must have at least the <a href="/spaces/ylYKicREo6JpuOJH4teK/pages/FgHdADiBhPEQoyJpklM9#site-viewer">Site Viewer</a> role for the site.</td></tr><tr><td>Unlock doors</td><td>User must be an access user in an <a href="/spaces/aaHs5RfKqv9Z49mi02cC/pages/YeQeIOeHDRwdXTBa473x">access group</a> associated with an <a href="/spaces/aaHs5RfKqv9Z49mi02cC/pages/JjN9BD7SVTQHaw76QJ0J">access level</a> that grants permission to the appropriate door(s).</td></tr><tr><td>Modify Doors in Guest Suite</td><td>User must be an <a href="/spaces/aaHs5RfKqv9Z49mi02cC/pages/n86tdTGtyHSxEUCufQgy#access-site-admin">Access Site Admin</a> for the site and a Workplace Site Admin or Org Admin.</td></tr><tr><td>Modify Cameras in Guest Suite</td><td>User must have at least the <a href="/spaces/ylYKicREo6JpuOJH4teK/pages/FgHdADiBhPEQoyJpklM9#site-live-only-viewer">Live-only Viewer</a> role for the site and a Workplace Site Admin or Org Admin.</td></tr></tbody></table>

***

## Organization-level roles

<details>

<summary>Org Admin</summary>

* Assign/remove Workplace Site Admin role.
* Assign/remove Workplace Site Viewer role.
* Import and modify sites.
* Manage employees from site-specific and organization-level employee lists.
* Edit site-specific and organization-level Guest Settings.
* Add/edit cameras (if the user is at least a Live-Only Viewer for the cameras in the site).
* Add/edit doors (only if the user is an [Access Site Admin](/access-control/getting-started/roles-and-permissions-for-access-control.md)).
* View guest logs and analytics.
* Sign out users and print badges.
* View and open doors (if the user has the appropriate [access control permissions](/access-control/users-and-credentials/add-a-user-to-the-verkada-access-system/assign-a-user-access-to-a-door.md)).
* View context camera footage (if the user has the appropriate [camera permissions](/verkada-cameras/getting-started/roles-and-permissions-for-cameras.md)).

</details>

***

## Site-level roles

Site-level roles can be assigned to individual users or groups and are specific to a particular site. Subsites inherit the permissions from the parent sites above them.

<details>

<summary>Workplace Site Viewer</summary>

* View guest logs and analytics.
* Sign out users and print badges.
* View and open doors (if the user has the appropriate [access control permissions](/access-control/users-and-credentials/add-a-user-to-the-verkada-access-system/assign-a-user-access-to-a-door.md)).
* View context camera footage (if the user has the appropriate [camera permissions](/verkada-cameras/getting-started/roles-and-permissions-for-cameras.md)).

</details>

<details>

<summary>Workplace Site Admin</summary>

* Manage employees from site-specific employee lists.
* Edit site-specific Guest Settings.
* Add/edit cameras (only if the user has at least a Live-Only Viewer role for Cameras).
* Add/edit doors (only if the user is an [Access Site Admin](/access-control/getting-started/roles-and-permissions-for-access-control.md)).
* View guest logs and analytics.
* Sign out users and print badges.
* View and open doors (if the user has the appropriate [access control permissions](/access-control/users-and-credentials/add-a-user-to-the-verkada-access-system/assign-a-user-access-to-a-door.md)).
* View context camera footage (if the user has the appropriate [camera permissions](/verkada-cameras/getting-started/roles-and-permissions-for-cameras.md)).

</details>

***

## Set permissions

You can set site permissions for existing users and groups by managing user roles, groups, or sites.

<details>

<summary>Users</summary>

#### Grant permissions

1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Users.**
3. Select a user to grant permissions.
4. Click **Manage** to the right of Organization Roles, User Management Roles, or Site Roles.&#x20;
   1. For site roles, select the relevant product.
   2. Select the role to grant to the user.
   3. Click **Save**.&#x20;

#### Revoke permissions

1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Users.**
3. Select a user to revoke permissions.
4. Click **Manage** to the right of Organization Roles, User Management Roles, or Site Roles.&#x20;
   1. For site roles, select the relevant product.
   2. De-select the role to remove from the user.
   3. Click **Save**.&#x20;

</details>

<details>

<summary>Groups</summary>

#### **Granting permissions**

1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Groups.**
3. Select a Command group to grant permissions.
4. At the top, click **Roles.**
5. Click **Manage** to the right of Organization Roles, User Management Roles, or Site Roles.&#x20;
   1. For site roles, select the relevant product.
   2. Select the role to grant to the group.
   3. Click **Save**.

#### **Revoking permissions**

1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Groups.**
3. Select a Command group to revoke permissions.
4. At the top, click **Roles.**
5. Click **Manage** to the right of Organization Roles, User Management Roles, or Site Roles.&#x20;
   1. For site roles, select the relevant product.
   2. De-select the role to remove from the group.
   3. Click **Save**.

</details>

<details>

<summary>Sites</summary>

1. In Verkada Command, go to **All Products > Admin.**
2. In the left navigation, select **Sites**.
3. Select a site, then in the right panel click **Manage**.
   1. In the top right, click **Add** to add a new user or group.
   2. Select an existing user or group to edit their permissions.

</details>

***

## FAQ

<details>

<summary>How do I grant Mailroom permissions but not Guest permissions, or vice versa?</summary>

To separate these permissions, make your Mailroom site and Guest site different sites entirely. Guest and Mailroom sites that are imported from the same site will share roles given to users. Learn more about [Roles and Permissions for Mailroom](/mailroom/getting-started/roles-and-permissions-for-mailroom.md).

</details>

<details>

<summary>Can a Guest user get access to my cameras if they have "No Access" to the site in Command?</summary>

Guest users must at least have the Live-Only Viewer role for the cameras in the site to view the camera feeds in Guest.

</details>

<details>

<summary>What are the minimum permissions needed to see the Guest tab under All Products in Command?</summary>

Users must be at least a Site Viewer for 1 site to see the Guest tab under **All Products**.

</details>

<details>

<summary>What is the best role I should grant to my front desk receptionist?</summary>

It depends on the specific permissions you want to grant. In most scenarios, receptionists only need to be Site Viewers.

</details>

***

{% hint style="info" %}
**Prefer to see it in action?** Check out the [video tutorial](https://www.youtube.com/watch?v=byXR4aAmjfU).
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.verkada.com/guest/getting-started/roles-and-permissions-for-guest.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.