Vision allows administrators to create custom permission groups, providing granular control over who can access what within the system.
Understanding System groups in Vision system
Before we dive into creating custom permission groups, it's important to know that these are different from system permission groups. System permission groups are predefined sets of permissions that determine what a user can and cannot do within the Vision system. They are a critical component of the system's security, ensuring that users only have access to the features and data they need to perform their tasks.
There are six system permission groups (roles) in Vision:
- User: Members of this group have access to the interface but not to the control panel.
- Admin: Members of this group have full access to the control panel.
- External API: Members of this group have limited access to the interface and is used for the API integration purposes.
- Space Owner: This role has owner rights.
- Reporting: Members of this group have limited access to the interface with rights to monitor analytics data only.
- Support: Typically used for troubleshooting by NSoft support team at the invite of the space owner.
These predefined roles offer a good starting point, but for more complex organizations with diverse user needs, custom permission groups are a necessity. That's where the custom permission group feature comes into play.
Creating Custom User groups
Creating a custom user group in Vision is a straightforward process. Here are the steps:
- Go to Control Panel, you can find it in the bottom right corner of the starting interface.
- Navigate to the 'Groups' tab in the Control Panel.
- Click the sign "+" located in the bottom right corner to open two options.
- Options are:
a) Add User Group
b) Add Admin Group
To create a custom user group, you'll need to select 'Add User Group'.
Figure 1 – Groups tab in Control Panel
Enter a name for the group. Then click Continue to proceed to the next step where you can set permissions for your group (see Figure 2).
Figure 2 – Adding a Custom User Group
In the permissions setting Step, you can completely hide the Live View, Timeline, Directory, Live Reports, and Reports from users in this group. You can also restrict their access to specific locations and cameras. Once you're satisfied with the permissions you've set, click 'Create' to finalize the group. (see Figure 3).
- Application Permissions: Enable access to the application's primary views, such as:
Live View
Directory
Reports
Live Reports - Locations: specify which locations will be accessible to users in this group.
- Cameras: choose which cameras will be visible to users in this group.
Figure 3 – User application permissions
Creating Custom Admin groups
Creating a custom admin group follows a similar process to create a user group, with an additional step to set control permissions. Here are the steps:
- Go to the Control Panel and navigate to the 'Groups' tab.
- Click the '' sign and select 'Add Admin Group '
- Enter a name for the group.
- Click 'Continue' to proceed to the next step where you can specify application permissions.
Figure 4 – Add admin group
Here you can Enable the application permissions you need and click 'Continue' to proceed to the last step where you can set control panel permissions for your new custom Admin group.
Figure 5 – Admin application permissions
In the final step, you can specify which sections within the control panel menu will be available to users in this custom group simply by enabling them. Once you have set the control permissions, click 'Create' to finalize the group (see Figure 6).
Figure 6 – Control panel permissions
Managing members in custom groups
Once you've created your custom groups, you can start assigning users to these groups. To do this, go back to the 'Members' tab in the Control Panel and assign the member you're interested into your new custom group.
Additionally, you can also bulk move members from one group to another (see Figure 7).
Figure 7 – Moving members in bulk