Open topic with navigation
System > Security Level Definition
|
Security Level Definition
|
Security
level refers to the permissions granted to an operator to access EntraPass
logical components (desktops, card information, etc.), as well as to perform
some actions on those components.
Note:
You
have to program the appropriate security levels if you want to limit operator
access to commands and/or options of the system menu.
It
is possible to customize an operator security level; the system allows
you to create up to 250 security levels. Each operator has a separate
login name, password and a corresponding security level. The password
is case-sensitive. There are three operators and security levels already
configured in EntraPass. These are: Installer, Administrator and Guard.
•
•
:
kantech
•
:
By default, a user defined as Installer has full access to all the system
menus. He/she can read and edit system components and has unrestricted
access to the system.
•
•
kantech1;
password: kantech
•
:
Administrator. By default, a user defined as Administrator has limited
access to a number of the system menus.
•
•
:
kantech2; password: kantech
•
:
Guard. By default, a user defined as Guard has limited access to the system
menu.
Creating/Modifying
an Operator Security Level
Assigning
security levels is critical to the system. In fact, if a security level
is given full access to a system menu, operators who are assigned this
security level will be able to modify system parameters. Make sure that
each operator is given the security level corresponding to his/her tasks.
Items
in the Security Level window are presented in a root tree with all components
available for selection. This structure makes it possible to target specific
components when granting security level for manual operations. Each security
level is identified by a colour: full access (green), read-only (yellow)
and no access (red). The security manager or an operator with appropriate
permissions can easily change or assign a component to a lower level security
level by double clicking an item until it changes to the desired colour
code.
Note:
Operators
will not be able to see items for which they have not been given access.
1 -
Under
the
tab,
select the
button.
The Security level window appears with the
tab
enabled.
2 -
From the
drop-down list, select the
you
want to modify.
•
To create
a new security level, click the
button
and enter the necessary information in the language section.
3 -
Select a system tab (Workstation, EntraPass Web, EntraPass Go or Smartlink API).
4 - Double-click an item until it reaches the desired status:
(red)
(yellow)
(green)
You
can also check the appropriate items on the left to be more specific about
the allowed rights.
Note:
A user with
Read-only
rights will not be able to print components in EntraPass.
Defining
Login Options for an Operator
The
tab allows you to define operator login and system display options:
•
Operator
login options: you can allow or restrict an operator to login
an
EntraPass workstation or server.
•
Active
windows that can be kept on the desktop: EntraPass allows operators to
keep
five active windows
on
the desktop.
•
Component
display options: components can be displayed with our without their physical
address. The physical address can appear on the left or right of the component
name.
1 -
Select
the
tab
to define parameters for the security level being defined.
2 -
In the
section, select the appropriate login options:
•
Select
to
allow the operator to login to the EntraPass server (Primary or Redundant).
•
Select
to
allow the operator to login to
any
application in the system.
3 -
The
section
allows users to increase the number of active windows on the desktop.
In fact, operators can
open five windows at the same time: one configuration window and four
windows from the other categories.
EntraPass
windows are classified
in five categories:
•
:
this group includes all the menus that allow an operator to program the
system. This group includes such menu items as:
menu
(card, Badging, card access group, access level,
visitor,
card type;
Definition
menu;
menu;
menu;
menu;
Video
menu;
Custom
and
.
•
:
this group includes all the Operation menu items and the Video playback
option.
•
Status
screen
: this group includes
windows of the Status menu, Current recording menu and Report state menu.
•
:
The following menus are included in this category: Option menu (card format,
authentication password, select languages, Printers options, Changes date
and time, etc.); Items of the User menu (Daypass, batch operations and
Import/Export CSV); View Report, Operation on In/Out, and View exported
videos.
•
:
this group includes Quick Report, Custom and In/Out report requests and
Video list windows.
Note:
These options
allow operators to keep more than one window active on the desktop. They
can bring to front or send to back the window they want to display, simply
by pressing
[ALT-F6]
.
4 -
In the
section, specify how the component's physical address will be displayed.
This will also affect how components will be sorted.
•
—If
selected, components will be sorted by their address (i.e. 01.01.01 Controller
xyz).
•
—If
selected, components will be sorted by their component name (i.e. Controller
xyz 01.01.01).
•
—If
selected, the address will not be displayed (i.e. Controller xyz) and
components will be sorted by name.
5 -
In the
Miscellaneous
section:
•
Hide card
holder pin content: If selected, it offers you the ability to hide the
card holder pin content from the view.
•
Hide Camera
from video view: If you are using the Video feature, EntraPass enables
you to deny viewing permission to a specified security level.
Note:
Checking
the
Hide
camera from video view
option
tells the system to verify access permission to cameras before loading
a video view. For example, if the selected operator’s security level has
access to a video server but not to all cameras defined in the video server
and has access to the selected video view, the system will hide the camera
that has been un-selected when assigning permission to the video server.
For details, see Video
Server Configuration.
Hiding
Card Information
EntraPass
offers you the ability to hide card information fields from view. For
example, you can decide that a certain security level (Guard for example)
can view or modify card information field. To do so, select the security
level, then under the tab,
check the box that corresponds to the fields you want to hide.
1 -
Select
the
tab
to limit the number of card fields which are visible to the operator who
is assigned this security level.
Note:
The
Supervisor
parameters
card
database field is only available with EntraPass Global Edition.
2 -
Select
the fields (either individually or in groups) that will be hidden to the
selected security level. Click on a field box repeatedly to scroll through
the different status (Normal, Hide or Read only).
Assigning
Video Custom Buttons
EntraPass
offers you the ability to customize five buttons for use in the Video
interface. System installers and administrators can customize buttons
for use by operators in the Video desktop. For example, a button customized
for Playback with fixed delay with specific pre-record and record delays
and assigned to a specific Security level will enable operators to trigger
the actions related to the specific button. If you associate a custom
button with a specific task (play back or generating video events, additional
buttons are added to the Video desktop ( >
Desktop dedicated to video viewing)
1 -
From the
drop-down
list, select the security level you want to define/edit.
2 -
Select
the
tab
to assign permission to this operator. The following permission can be
granted:
•
Playback
with fixed delay
•
Playback
with custom delay
•
Generate
recording event with fixed parameters
•
Generate
recording event with custom parameters.
3 -
Select
the option you want to assign to the operator being modified.
Note:
Pressing
the
button associated with
Playback with fixed delay
will
start a play back with the specified duration. This includes the pre-alarm
recording time and the maximum recording time.