Security Level Definition
System > Security Level Definition
Security Level Definition

Security level refers to the permissions granted to an operator to access EntraPass logical components (desktops, card information, etc.), as well as to perform some actions on those components.

NOTE:  You have to program the appropriate security levels if you want to limit operator access to commands and/or options of the system menu.

It is possible to customize an operator security level; the system allows you to create up to 250 security levels. Each operator has a separate login name, password and a corresponding security level. The password is case-sensitive. There are three operators and security levels already configured in EntraPass. These are: Installer, Administrator and Guard.

•   Installer:

○   Login name and password : kantech

○   Security level : By default, a user defined as Installer has full access to all the system menus. He/she can read and edit system components and has unrestricted access to the system.

•   Administrator:

○   Login name: kantech2; password: kantech

○   Security level : Administrator. By default, a user defined as Administrator has limited access to a number of the system menus.

•   Guard:

○   Login name : kantech2; password: kantech

○   Security level : Guard. By default, a user defined as Guard has limited access to the system menu.

Creating/Modifying an Operator Security Level

Assigning security levels is critical to the system. In fact, if a security level is given full access to a system menu, operators who are assigned this security level will be able to modify system parameters. Make sure that each operator is given the security level corresponding to his/her tasks.

Items in the Security Level window are presented in a root tree with all components available for selection. This structure makes it possible to target specific components when granting security level for manual operations. Each security level is identified by a colour: full access (green), read-only (yellow) and no access (red). The security manager or an operator with appropriate permissions can easily change or assign a component to a lower level security level by double clicking an item until it changes to the desired colour code.

NOTE: Operators will not be able to see items for which they have not been given access.

1 - Under the System  tab, select the Security level  button. The Security level window appears with the Menu  tab enabled.

2 - From the drop-down list, select the Security level  you want to modify.

•   To create a new security level, click the New  button and enter the necessary information in the language section.

3 - Select a system  tab (Workstation, EntraPass Web, EntraPass Go or Smartlink API).

4 - Double-click an item until it reaches the desired status: No access (red) , Read-only (yellow)  or Full access (green) .  You can also check the appropriate items on the left to be more specific about the allowed rights.

NOTE: A user with Read-only rights will not be able to print components in EntraPass.

Defining Login Options for an Operator

The Miscellaneous tab allows you to define operator login and system display options:

•   Operator login options: you can allow or restrict an operator to log in an EntraPass workstation or server.

•   Active windows that can be kept on the desktop: EntraPass allows operators to keep five active windows on the desktop.

•   Component display options: components can be displayed with our without their physical address. The physical address can appear on the left or right of the component name.

1 - Select the Miscellaneous  tab to define parameters for the security level being defined.

2 - In the Login restrictions section, select the appropriate login options:

•   Select Allow login on server  to allow the operator to log in to the EntraPass server (Primary or Redundant).

•   Select Allow login on workstation  to allow the operator to log in to any application in the system.

3 - The Keep on application desktop  section allows users to increase the number of active windows on the desktop. In fact, operators can open five windows at the same time: one configuration window and four windows from the other categories. EntraPass windows are classified in five categories:

•   Configuration   screen : this group includes all the menus that allow an operator to program the system. This group includes such menu items as: User  menu (card, Badging, card access group, access level, visitor, card type; Definition  menu; Group  menu; Devices  menu; System  menu; Video  menu; Custom  and In/Out reports .

•   Operation screen : this group includes all the Operation menu items and the Video playback option.

•   Status screen : this group includes windows of the Status menu, Current recording menu and Report state menu.

•   Database screen : The following menus are included in this category: Option menu (card format, authentication password, select languages, Printers options, Changes date and time, etc.); Items of the User menu (Daypass, batch operations and Import/Export CSV); View Report, Operation on In/Out, and View exported videos.

•   Report screen : this group includes Quick Report, Custom and In/Out report requests and Video list windows.

NOTE: These options allow operators to keep more than one window active on the desktop. They can bring to front or send to back the window they want to display, simply by pressing [ALT-F6] .

4 - In the Components physical address section, specify how the component's physical address will be displayed. This will also affect how components will be sorted.

•   Display on left —If selected, components will be sorted by their address (i.e. 01.01.01 Controller xyz).

•   Display on right —If selected, components will be sorted by their component name (i.e. Controller xyz 01.01.01).

•   No display —If selected, the address will not be displayed (i.e. Controller xyz) and components will be sorted by name.

5 - In the Miscellaneous section:  

•   Hide card holder pin content: If selected, it offers you the ability to hide the card holder pin content from the view.

•   Hide Camera from video view: If you are using the Video feature, EntraPass enables you to deny viewing permission to a specified security level.

NOTE: Checking   the Hide camera from video view option tells the system to verify access permission to cameras before loading a video view. For example, if the selected operator’s security level has access to a video server but not to all cameras defined in the video server and has access to the selected video view, the system will hide the camera that has been un-selected when assigning permission to the video server. For details, see Video Server Configuration.

Hiding Card Information

EntraPass offers you the ability to hide card information fields from view. For example, you can decide that a certain security level (Guard for example) can view or modify card information field. To do so, select the security level, then under the Card database fields tab, check the box that corresponds to the fields you want to hide.

1 - Select the Card database fields  tab to limit the number of card fields which are visible to the operator who is assigned this security level.

NOTE: The Supervisor parameters card database field is only available with EntraPass Global Edition.

2 - Select the fields (either individually or in groups) that will be hidden to the selected security level. Click on a field box repeatedly to scroll through the different status (Normal, Hide or Read only).

Assigning Video Custom Buttons

EntraPass offers you the ability to customize five buttons for use in the Video interface. System installers and administrators can customize buttons for use by operators in the Video desktop. For example, a button customized for Playback with fixed delay with specific pre-record and record delays and assigned to a specific Security level will enable operators to trigger the actions related to the specific button. If you associate a custom button with a specific task (play back or generating video events, additional buttons are added to the Video desktop (Desktops > Desktop dedicated to video viewing)

1 - From the Security level  drop-down list, select the security level you want to define/edit.

2 - Select the Video custom button  tab to assign permission to this operator. The following permission can be granted:

•   Playback with fixed delay

•   Playback with custom delay

•   Generate recording event with fixed parameters

•   Generate recording event with custom parameters.

3 - Select the option you want to assign to the operator being modified.

NOTE: Pressing   the button associated with Playback with fixed delay  will start a play back with the specified duration. This includes the pre-alarm recording time and the maximum recording time.