Users

The Users view contains a list of G-SIM users.

The settings of the Users are grouped in tabs.

Settings

The administrator can configure the following user settings:

Settings

Description

Name / Short Name / Surname

These settings are used to display the user in the list, cards, etc.

Login Name

Used to perform login to the Operator Console / Management Console.

Windows Authentication

Select this checkbox to use Windows Authentication. In this case, the login name should be in the format of domain / username. This setting is enabled only when Allow Windows Authentication setting (see System Settings) is selected.

Password

The user password. The setting is empty and disabled when Windows Authentication is selected. Otherwise, the password is mandatory. The length of the password should not be shorter than the value Minimum Password Length (see System Settings).

Must change password on next login

Select to obligate the user to change the password the next time the user logs in to the Operator Console.

Login Limit

The Login Limit is the number of login times allowed for users of the Operator Console. If the number of allowed logins is exceeded, the login will fail, and the user will receive a message indicating that the number of allowed logins has been reached. A zero value means an unlimited number of available logins. If the user is assigned to a user group, the login limit will be overridden by the login limit value of the user group.

Logins used

The number of used logins. The administrator can reset the number to 0 by using the Reset button.

Concurrent Login Limit

This setting specifies the number of allowed concurrent logins to the operator console for a user. It specifies how many OpCons with the same user can concurrently login to the same G-SIM server.

If the allowed number of concurrent logins is exceeded, the login fails and the user receives a corresponding message.

The value 0 means an unlimited number of concurrent logins.

This setting works only if the license Allow Global Server Connections is available and activated (global environment).

In case of a non-global environment, it is not possible to connect more then one user with the same login name concurrently to the same G-SIM server.

Example
The user Test has ”Concurrent Login Limit” = 2.
You start the OpCon on computer A and login with user Test. The login will be successful.
You start the OpCon on computer B and login with user Test. The login will be successful.
You start the OpCon on computer C and login with user Test. The login will not be successful. You will get the message “For current user allow only 2 concurrent login.”

User group

Select a user group to assign the user to it. None means that the user is not assigned to any of the user group.

Lock privileges to group

Select this checkbox to use the privileges of the user group as set privileges for the user.

Activate user

The administrator can activate or deactivate the users. Only active users can log in to the Operator Console or Management Console.

Locked

The administrator can lock or unlock a user. The user is automatically locked if he exceeds the number of Invalid Login Attempts (see System Settings). Only unlocked users can log in to the Operator Console or Management Console.

Security group / Service Number / Phone Number / Position / Physical Location / E-Mail

These fields are optional and intended for your own organizational use.

User Photo

Click the Load button to select the image file to be used as the user photo. The image will automatically be resized to be not larger than 250 px in each dimension, the aspect ratio of the original image will be maintained. Click the Clear button to remove the user photo.

Privileges

The Privileges tab is available only if the Lock privileges to group checkbox is unchecked. Otherwise, the privileges of the selected user group are applied to the user.

In this tab, the administrator can configure the privileges of the specific user. The privileges are organized in groups. With the Select all and Clear all buttons, the administrator can select or deselect all privileges with one click. To display a detailed description, he can hold the mouse pointer over the individual privileges.

The administrator can select a user group from Default for User group to reset the privileges of the specific user to those of the selected user group.

The following privileges are available:

Name

Description

ID

Handle Alarm

The user may take responsibility for a selected alarm.

41

Forward Alarm

The user may transfer the responsibility of an acknowledged alarm to a specific user.

42

Fast Process Alarms

The user may Fast Process an alarm which means he may acknowledge and complete an alarm in a single click.  Default action settings will be used where actions are required.

43

Play Audio for Unhandled Alarms

The system will play audio beeps while there are unhandled alarms.

45

View Alarms

The user may view a list of all alarms.

40

View Alarms of Others

The user may view alarms that are being handled by other users.

44

View All Alarms

The user may see all the alarms on the system.

46

View Alarms Acknowledged but not yet Completed by Others

The user may view alarms that were Acknowledged (but are not yet completed) by other users.

48

Allow Alarm Auto view

The user will receive alarms automatically in the specified screen.

47

Take and view alarm

The user, user group or privilege group may use a combined button for taking and viewing an alarm in one step.

52

Allow the use of alarm report manager

The operator is allowed to use the Alarm report manager.

53

Name

Description

ID

View Own Audit Log

The user may view his own audit log.

80

View Audit Logs of other Users

The user may view the audit logs of all system users.

81

Generate Audit Log Report

The user may print or email an audit log report.

82

Name

Description

ID

View Cameras

The user may view a list of all the available cameras.

10

View Live Video

The user may view the live video stream from a selected camera.

11

Playback Control

The user may play back the video footage of a selected camera.

17

View Archived Video Footage

The user may view archived video footage / images.

27

Show Camera On Map

The user may view the position of a selected camera on the map.

12

Block Camera

The user may block a camera so that it cannot be viewed by specific users or user groups.

14

PTZ Control

The user may control Pan, Tilt & Zoom cameras.  If this box is not checked, the user will not have any PTZ control functionality and another user will not be able to grant him any such functionality.  If this box and the next one is checked, the user will have to ask permission to use PTZ control.

 

Examples:

  1. To give a user full PTZ control to all cameras, check this box and uncheck the next one.   

  2. To give a user no default PTZ control, but with the option to request control, check this box and check the next one.

  3. To give a user control to only some PTZ cameras, with the option to request control of the others, check this box, check the next one, and define PTZ Control Restrictions for specific cameras or groups.

  4. To give a user only control to some PTZ cameras, do the same as in (3), but do not check the next box - no additional control may be granted.

16

PTZ restricted Cameras may be unlocked

Another user (with the PTZ Unlock privilege) may unlock PTZ cameras with restricted control for this user.  If no restrictions were applied to any PTZ camera, checking this box will force this user to ask for permission for any PTZ control.

54

May unlock PTZ control for other users

The user may temporary grant PTZ control to users who normally do not have control BUT who do have the previous privilege.  

55

Allow PTZ Pre-sets Recall

The user may recall Pre-set positions for PTZ cameras.

18

Allow PTZ Pre-sets Save

The user may save Pre-set positions for PTZ Cameras.

19

Manage reference frame

The user may modify the reference frame of a camera used for Camera Position Authentication.

20

Export Video to preconfigured locations

The user may export video to one of multiple preconfigured export locations.

24

Export Video to any location

The user may export video to any location.

26

Export Frame to preconfigured locations

The user may export a frame to one of multiple preconfigured export locations.

21

Export Frame to any location

The user may export a frame to any location.

25

The user may create a new export directory

The user may create a new export directory.

29

Override Console Restrictions

The user can override the console restrictions.

22

Video Audio Playback

The user may enable Video Audio Playback.

28

Show AD on Video

The user can see AD rectangles on Video.

250

Show VMD on Video

The user can see VMD rectangles on Video.

251

Show GTECT on Video

The user can see GTECT rectangles on Video.

252

Show Action Text on Video

The user can see Action Text rectangles on Video.

253

Override Motion Privacy and Client Privacy

The user may override the default rendering of Motion Privacy and Client Privacy Zone.

254

View the Failover Overview screen

The user may view the Failover Overview screen. This will only makes sense if failover is configured for this setup.

255

May disable privacy protection for another user

This privilege allows the user to export a video with removable privacy masking. If the user does not have this privilege, he can only export videos with irremovable privacy masking. In this case, the option is hidden in the export menu.

256

Camera check allowed

The user is allowed to use the camera check service.

257

Process SetClientVCA action

Privilege to process SetClientVCA Action.

258

Enable bookmark functionality

Enable bookmark functionality to set bookmarks for video.

259

Allow Face Recognition Enrollment

Allow Face Recognition Enrollment.

260

Process Viewer Actions

Enables the OpCon to process the Viewer Actions send from an external device to open cameras or scenes, change playmodes and clear viewer from remote even if the operator does not have the privilege to view cameras.

261

Show the "Viewed by" table

The user is allowed to see the "Viewed by" table to see which other operators are viewing the camera.

262

Show the template selector

User can access the template selector and change templates.

263

Override console location configuration

This privilege enables the user/group/privilege group/console to override the location setup made on sites (Local/Remote connection setup).

270

Allow High Resolution Channel Export

The user can export high resolution video on remote locations where only low resolution footage can be viewed.

271

Allow Forensic Search

The operator is allowed to start a forensic search for the specific camera. Please note that the forensic search is an external application. The forensic search is only start when the console has a valid console global number.

272

Name

Description

ID

Create Cut Lists

The user may create and edit his own Cut Lists.

90

Export Cut Lists

The user may export his own Cut Lists.

91

Delete Cut Lists of other users

The user may delete the Cut Lists created by other users.

92

Name

Description

ID

Override Default Privileges

The user’s privileges will be used if this option is selected.

If this option is NOT selected and the console has NO privileges set, then the user’s privileges will be used.

If this option is NOT selected and the console has privileges set, then only the privileges where both the console and user privileges are selected, will be used.

23

Name

Description

ID

Allow the use of Custom Buttons

The user may view and use Custom Events / Camera controls.

300

Allow change password

The user may change password.

301

Show the Customize menu

Shows or Hides the customize menu for the operator.

264

May connect to Global Servers

The user is allowed to connect to Global Servers and view cameras etc. from these remote servers.

701

Show Global Servers status page

Enables Status page to be seen in OpCon.

702

Name

Description

ID

View Public Guard Tours

The user may view public guard tours.

70

Edit Public Guard Tours

The user may create, edit and delete public guard tours.

71

Edit/View Private Guard Tours

The user may create, edit, delete and view his own guard tours.

72

Name

Description

ID

Generate Process Data Report

The user may print or email a Process Data search results report.

103

Motion Search (MOS)

The user may perform a Motion Search.

101

Process Data

Process Data.

102

Video Footage restricted to Process Data

If this privilege is enabled:

  • Only videos from Process Data search results can be dropped into the viewers.

  • Video footage is limited to the event time range of the Process Data.

  • Live Video mode is disabled.

  • All other Video modes works inside Process Data event time range.

  • Drag and Drop of cameras, cut list, alarms, guard tours into the viewers is disabled.

  • Alarms, populated and linked layouts are displayed without cameras.

In addition to the new privilege the user/user group also needs the privileges View Cameras and Playback Control for full functionality.

In order for restricted users to view the process data, you must enable this option for the user as well as the Override Default Privileges option for the console.

As this privilege does not work if the View further than Event Runtime for Process Data privilege is enabled as well, there is a function which prevents both privileges from being activated at the same time.

104

View further than Event Runtime for Process Data

If this privilege is enabled the process data of the video material is displayed in the viewer. When the event is over, the video material continues to run after the event.

As this privilege does not work if the Video Footage restricted to Process Data privilege is enabled as well, there is a function which prevents both privileges from being activated at the same time.

With this privilege the freeflow mode is activated which only works with process data and not with items from the cutlist.

105

Name

Description

ID

Administrator

The user may run the Management console in order to administer the system.

200

Connection Manager Settings Access

The user may change the Connection Manager configuration.

IMPORTANT: Changing these parameters could result in a system malfunction.

201

Users and Security Settings Access

The user may add and remove users and change user permissions.

202

Sites and Maps Access

The user may change Site settings as well as add and setup maps.

203

Mediasources and Cameras Access

The user may change the Mediasource settings and configure cameras.

204

Health and Alarms Access

The user may change how system health is monitored and also configure alarms.

205

Viewer Templates Access

The user may change which viewer templates are available for the Operator user interface.

206

Tools Access

The user has access to system tools.

IMPORTANT: Invalid test data could be distributed.

207

Alarm Simulator

The user may simulate alarms.

208

Add/Manage Plugins

The user may change health monitor plugins.

209

Manage Alarm Actions

The user may change alarm handling actions.

210

Client Data Settings Access

The user may change client settings.

211

Restrictions and Allowances Access

The user may change client restrictions and allowances.

213

Limited Administrator

The following behaviour is expected if this privilege only is set:

  • Every other administrator privilige should be unchecked to ensure a senseful privilege structure.

  • The limited administrator can add & edit users without administrator or limited administrator rights.

  • The limited administrator can add & edit users groups without administrator or limited administrator rights.

  • The limited administrator can add & edit privilige groups without administrator or limited administrator rights.

  • The limited administrator can add & edit priviliges of users without administrator or limited administrator rights.

  • Edit in this case includes the adaption of passwords.

Limitations of this privilege:

  • The limited administrator can NOT add & edit users with administrator or limited administrator rights.

  • The limited administrator can NOT add administrator or limited administrator rights to users.

  • The limited administrator can NOT edit the privileges of users with administrator or limited administrator rights.

  • The limited administrator can NOT add administrator or limited administrator rights to privilige groups.

  • The limited administrator can NOT add administrator or limited administrator rights to user groups.

  • The limited administrator can NOT delete users, user groups or privilige groups.

214

Name

Description

ID

View Messages

The user may view received messages.

50

Send Message

The user may reply to messages and send new messages.

51

Name

Description

ID

View Sites

The user may view a list of all Sites.

30

Allow Sending Actions from Maps

The user may send custom defined Actions from Maps by clicking on interaction objects.

33

View Interaction Objects on the Map

The user may see any Interaction Objects on Maps.

34

View Site Map

The user may view the map(s) of a selected Site.

31

Show Site Critical Flag

The user will see when a Site is in critical state (i.e. when the HealthAgentCheckinCriticalFlagPeriod has been exceeded).

32

Name

Description

ID

Show Task Tab

The user have access to Tasks through a Task Tab.

60

Create Tasks

The user may create new default tasks. Any task created indirectly (camera related etc.) or transferred, can still be handled without this permission.

61

View Tasks of all Users

The user may view the tasks assigned by and to all users.

63

Transfer Camera

The user may transfer a camera to another user.

13
Name Description

ID

Show User Tab

The user have access to Users through a User Tab.

67
Name Description

ID

Set Video Wall Layout

The user may set and change the layout of video wall consoles.

110

Clear Video Wall

The user may clear all the viewers on a video wall screen.

111

Set Video Wall Content

The user may send content to Video Wall viewers.

112

Set Viewer content on remote Operator Consoles.

The user may send content to viewers on remote Operator Consoles, including manned consoles with remoting enabled.

115

Can restart Remote Operator Console

The user can restart Remote Operator Console.

116
Name Description

ID

Show Browser Tab

The user have access to Bookmarks through a Browser Tab.

120