Permissions-based Role Management for Users

Topics included in this article are:

• What are roles for users?
• How to create a role?
• What do all the permissions mean?
• Cloning a Role

What are roles for users?

Often times in organizations you need control which users have access to certain content.  Perhaps you have a lobby camera that you want your receptionist to have access to, or you have a set of cameras that certain teachers should be able to access, but those users should not be able to access other cameras in the organization.

For this reason, we have the concept of roles for every users in your organization.  Every role is given a set of permissions as well as access to certain cameras.  At any time, you can switch what role a particular user has.  

How to create a role?

To set up a new role, simply login and go to Settings -> Role Management

Now select "Add Role" and walk through the quick wizard.  You'll need to name the role, select the permissions and choose which cameras this role has access to.

Any camera that a role does not have permission to access, will not show up when a user assigned to that role views the website or mobile app.  Furthermore, that role will not be able to see any alerts or saved clips specific to that camera.  

Once you have created your new role, you can assign any users to it by going to the "User Management" tab and clicking on the role assigned to the user.  You will get a pop-up asking which role you want to assign them to.

By default, every organization has a "Super Admin" role which is unable to be removed.  This role is allowed to access everything within the account.  

 What do all the permissions mean?

"Register and unregister devices"

• Devices -> Cameras -> Camera Page -> Update Firmware button
• Devices -> Cameras -> Register Devices Button
• Devices -> Climate -> Register Climate Sensor
• Devices -> Tag -> Register Tag
• Devices -> Door -> Register Door
• Devices -> Cameras -> Camera Page -> Player -> Image Settings

"Add, edit and delete locations"

• Locations -> Create Location
• Locations -> Location -> Edit Location

"View and edit policies"

• Settings -> "Alert Polices" tab
• Camera Page -> Camera Policy
• Dashlet -> "Dismiss" button
• Dashlet -> "Alert Policies" link
• Settings -> Alert Policies -> {policy} -> "Edit" button
• Settings -> Alert Policies -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> Climate Sensores -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> Tags -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> Door Sensors -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> "Add Policy" button
• Settings -> Alert Policies -> Tags -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> Tags -> "Add Policy" button
• Settings -> Alert Policies -> Climate Sensors -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> Climate Sensors -> "Add Policy" button
• Settings -> Alert Policies -> Door Sensors -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> Door Sensors -> "Add Policy" button
• Note: there is a back door by going Devices -> Climate Sensors -> {sensor} -> Settings & Details -> Manage Settings

"View and manage users"

• Settings -> User Management
• Settings -> Role Management
• Settings -> Alert Notifications
• if "https://console.rhombussystems.com/settings/roles/" is entered manually, page will only display "You do not have access"
• if "https://console.rhombussystems.com/settings/users/partners/" is entered manually, page will only display "You do not have access"
• if "https://console.rhombussystems.com/settings/users/partners/{partnerUuid}/" is entered manually, page will not display Role "Manage" button
• if "https://console.rhombussystems.com/settings/users/" is entered manually, page will only display "You do not have access"
• if "https://console.rhombussystems.com/settings/users/{userUuid}/" is entered manually, page will not display Role "Manage" button
• Note: Alert notification "Manage" button is still present and links to forbidden page
• Welcome Dashlet -> "Dismiss" button
• Welcome Dashlet -> Link to alert notifications page
• Search Function will not include users
• Search Function will not include "User Management" tab
• Search Function will not include "Role Management" tab
• Search Function will not include "Alert Notifications" tab
• Search Function placeholder text will not include "user"

"View and manage audit logs and reports"

• "Logs & Reports" tab will be missing
• Will not fetch Audit reports or Diagnostics events

"View and manage integration settings"

• Settings -> "Third Party Integrations" tab
• Search Function will not include "Third Party Integrations"

"View licenses and apply them to cameras"

• Settings -> "Licenses" tab
• Devices -> {camera} -> "Add Cloud Storage" button
• Devices -> {camera} -> license "Manage" button
• Search Function will not include "Licenses"

"Receive weekly summary emails"

• Receive a weekly summary email about system status

"View and manage faces"

• Investigations -> "Faces" tab
• Dashboard -> "Recent Faces" row
• will not fetch face events
• will not fetch faces

"Share and download video"

• Alert List Page -> "Share" button on each row
• Alert List Page -> Alert Modal -> "Share Clip" button
• Saved Video -> "Share" button
• Saved Video -> "Shared" tab
• Saved Video -> "Download" button
• Saved Video -> Timelapses -> "Shared" tab
• Saved Video -> Timelapses -> "Share" button
• Saved Video -> Timelapses -> "Download" button
• Devices -> Cameras -> {camera} -> Camera Details & Settings -> "Shared Streams"
• Devices -> Cameras -> "Shared Stream" column
• Clip Player modal -> "Snapshot" button
• Clip Player modal -> "Share Clip" button

"Auth Administration"

• Settings -> "Single Sign-On" tab
• Settings -> "2-Factor Authentication" tab

"View and manage account settings"

• Settings -> "Account" tab
• Note: manually typing "https://console.itg.rhombussystems.com/settings/account/" will still navigate to Account page

"Api Administration"

• Settings -> "API Management" tab
• Settings -> "Apple TV" tab

Cloning a Role

Cloning an existing role is easy. Go to the Role Management page and find the Role you want to clone and select 'Clone'. You will be asked to review the permissions and device access, which can be edited if you want to only slightly modify a role.