Permissions-based Role Management for Users

Topics included in this article are:

• What are roles for users?
• How to create a role?
• What do all the permissions mean?
• Cloning a Role

What are roles for users?

Often times in organizations you need control which users have access to certain content.  Perhaps you have a lobby camera that you want your receptionist to have access to, or you have a set of cameras that certain teachers should be able to access, but those users should not be able to access other cameras in the organization.

For this reason, we have the concept of roles for every users in your organization.  Every role is given a set of permissions as well as access to certain cameras.  At any time, you can switch what role a particular user has.  

How to create a role?

To set up a new role, simply login and go to Settings -> Role Management

Now select "Add Role" and walk through the quick wizard.  You'll need to name the role, select the permissions and choose which cameras this role has access to.

On the top, you will notice the options 'Edit all locations', 'add future locations with default setting', and a toggle for the specific location. The 'Edit all locations' option applies to all locations and cameras to have 'No Access', 'Live Only, 'View Only', and 'View & Manage'. The 'add future locations with default setting' applies to newly added locations for this role. Then the toggle for the specific location works the same as 'Edit all locations', but only for that specific camera. 

Any camera that a role does not have permission to access, will not show up when a user assigned to that role views the website or mobile app.  Furthermore, that role will not be able to see any alerts or saved clips specific to that camera.  

Once you have created your new role, you can assign any users to it by going to the "User Management" tab and clicking on the role assigned to the user.  You will get a pop-up asking which role you want to assign them to. 

By default, every organization has a "Super Admin" role which is unable to be removed.  This role is allowed to access everything within the account.  

What do all the permissions mean?

When enabling the below Permission the following is what you gain access to:

"Register/Delete devices"

• Devices -> Cameras -> Camera Page -> Update Firmware button
• Devices -> Cameras -> Register Devices Button
• Devices -> Climate -> Register Climate Sensor
• Devices -> Tag -> Register Tag
• Devices -> Door -> Register Door
• Devices -> Cameras -> Camera Page -> Player -> Image Settings

"Add, edit and delete locations"

• Locations -> Create Location
• Locations -> Location -> Edit Location

"Share and download video"

• Alert List Page -> "Share" button on each row
• Alert List Page -> Alert Modal -> "Share Clip" button
• Saved Video -> "Share" button
• Saved Video -> "Shared" tab
• Saved Video -> "Download" button
• Saved Video -> Timelapses -> "Shared" tab
• Saved Video -> Timelapses -> "Share" button
• Saved Video -> Timelapses -> "Download" button
• Devices -> Cameras -> {camera} -> Camera Details & Settings -> "Shared Streams"
• Devices -> Cameras -> "Shared Stream" column
• Clip Player modal -> "Snapshot" button
• Clip Player modal -> "Share Clip" button

"View and edit policies"

• Settings -> "Alert Polices" tab
• Camera Page -> Camera Policy
• Dashlet -> "Dismiss" button
• Dashlet -> "Alert Policies" link
• Settings -> Alert Policies -> {policy} -> "Edit" button
• Settings -> Alert Policies -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> Climate Sensors -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> Tags -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> Door Sensors -> {policy} -> "Delete Policy" button
• Settings -> Alert Policies -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> "Add Policy" button
• Settings -> Alert Policies -> Tags -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> Tags -> "Add Policy" button
• Settings -> Alert Policies -> Climate Sensors -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> Climate Sensors -> "Add Policy" button
• Settings -> Alert Policies -> Door Sensors -> "Unassigned Cameras"  list
• Settings -> Alert Policies -> Door Sensors -> "Add Policy" button

"View and manage users"

• Settings -> User Management
• Settings -> Role Management
• Settings -> Alert Notifications
• Welcome Dashlet -> "Dismiss" button
• Welcome Dashlet -> Link to alert notifications page

"View and manage audit logs and reports"

• "Logs & Reports" tab will be available
• Will be able to fetch Audit reports or Diagnostics events

"View and manage integration settings"

• Settings -> "Third Party Integrations" tab
• Search Function will be include "Third Party Integrations"

"View licenses and apply them to cameras"

• Settings -> "Licenses" tab
• Devices -> {camera} -> "Add Cloud Storage" button
• Devices -> {camera} -> license "Manage" button
• Search Function will be include "Licenses"

"View and manage faces"

• Investigations -> "Faces" tab
• Dashboard -> "Recent Faces" row

"View and manage account settings"

• Settings -> "Account" tab

"API Administration"

• Settings -> "API Management" tab
• Settings -> "Apple TV" tab

"Manage License Plates"

• Investigations -> "License Plates" tab
• Dashboard -> "Recent License Plates" row

"Receive weekly summary emails"

• Receive a weekly summary email about system status

"Auth Administration"

• Settings -> "Single Sign-On" tab
• Settings -> "2-Factor Authentication" tab

"Firmware Administration"

• Settings -> "Firmware Updates" tab
• Settings -> "Firmware Updates" -> Can update the schedule to control when firmware updates occur

"Alarm Monitoring"

• Alarm Monitoring -> "Status" Tab
• Alarm Monitoring -> "Threat Cases" Tab

Cloning a Role

Cloning an existing role is easy. Go to the Role Management page and find the Role you want to clone and select 'Clone'. You will be asked to review the permissions and device access, which can be edited if you want to only slightly modify a role. 

If you have any further questions please reach out to our Rhombus Support at help@rhombus.com. If you would like to talk to a Rhombus Sales Representative please reach out to sales@rhombus.com.