MOBOTIX Online-Hilfe

Sprache: en

Managing User Groups and Access Rights

The Group Access Control Lists dialog allows managing the camera's user groups that are assigned in the Users and Passwords dialog.

The Public Access row makes the corresponding screens and functions publicly available, i.e. accessing them does not require a user name and password. If a checkbox in this row is activated, editing the group access rights below is not possible. If you would like to set individual access rights for certain screens or functions, you need to deactivate the checkbox in this row, then set the access rights for the individual groups.

The following rules apply for group names and passwords:

• The maximum number of groups is 10.
• Minimum length for group names is 3, maximum length is 16 characters.
• Allowed characters are "A-Z", "a-z", numbers, "." (dot), "-" (hyphen) and "_" (underscore).
• Note that all entries are case-sensitive.
• It is not possible to rename or delete the admins group.

Notes:

• Once you have finished configuring the groups, you should always store the settings in the camera’s permanent memory. If the configuration is not stored in the camera's permanent memory, the changed groups will only be valid until the next camera reboot. Be careful as this may create security issues.
  Use the Close button at the end of the dialog as it will automatically ask you to store the camera configuration to the camera's permanent memory.
• Attention: Resetting this dialog to factory settings will not only reset the options of this dialog, but also those of the Users and Passwords! If you are asked to enter a user name and password after resetting to factory defaults, remember to enter admin as user name and meinsm as password.
• As per factory default, most of the camera's screens and functions are publicly accessible. If you would like to protect the camera from public access, proceed as described in section Protecting a Camera From Public Access.

Creating New Groups

By default, new groups are created without any access rights. If the desired checkboxes are not accessible (gray), deactivate the corresponding checkbox in the Public Access row at the top of the dialog.

When activating a Screen, the software will set the required minimum access rights in the Function section automatically. These checkboxes will remain checked even if the screen has been deactivated for this particular group; they have to be removed one by one, if required.

Deleting Groups

Activate the Remove Group option behind the group(s) you would like to delete and click on Set at the bottom of the dialog.

Once you have finished configuring the groups, you should always store the settings in the camera’s permanent memory. If the configuration is not stored in the camera's permanent memory, all deleted groups will again be valid after the next camera reboot!

If a group has been deleted, all users assigned to the deleted group in the Users and Passwords dialog will be assigned to the undefined group.

The admins group cannot be deleted. Users of this group always have access to the administration menu.

Setting the Access Rights

The access rights are split into three sections:

• Screen/View controls access to the camera's screens.
• Function controls access to specific functions of the camera.
• Configuration controls access to the camera's configuration parameters.

Screen/View

Access to the camera screens in this section can be set individually for every group.

In order to ensure that the minimum access rights are granted, the corresponding access rights in the Function section will be granted automatically when activating a certain screen (even if the checkboxes are gray as they are publicly accessible). When deactivating a screen or view, these access rights will remain checked and have to be unchecked one by one. For additional information on this topic, see the Minimum Access Rights section.

Function

The access rights in this section are required by the different Screens/Views for proper operation, but can be removed one by one, if required.

Configuration

The access rights in this section provide access to different configuration sections of the MOBOTIX camera.

Minimum Access Rights

Specific screens require certain Functions for proper operation. For example, the Guest screen requires the Guest Image function, the Live screen requires the Live Image function (see Function table).

To facilitate setting access rights, all required functions of a screen will be set automatically if a certain screen is being activated for a group (the required Function checkboxes are activated automatically). The access rights added automatically comprise all required functions for a screen to work properly.

Once set, the checkboxes can be deactivated again manually. One group may thus have access to the Live screen, using the functions controlled by API (QC, SB) is not allowed. Likewise, it is possible to grant access to the Guest screen for a group using the Guest Image function and also allow accessing the Camera Status dialog (Info function).

Setting Public Access

The checkboxes of the Public Access row grant public access to camera screens, functions and configuration sections, i.e. you will not need a user name or password to access these areas of the camera. An exception is the Admin configuration section, which cannot be opened for public access.

If you would like to set individual access rights for certain screens or functions, you need to deactivate the checkbox in the Public Access row, then set the access rights for the individual groups.

Protecting a Camera From Public Access

To prevent the camera from unauthorized access, you should execute the following steps:

1. It is recommended to start by resetting all users, passwords and group definitions to the Factory default settings.
   Caution! This will also reset the admin user's password to meinsm (Users and Passwords dialog)!
2. Deactivate all checkboxes of the Public Access row.
3. Create the required user groups in this dialog and the users in the Users and Passwords dialog.
4. Make sure that you change the password for the admin user!

Storing the Configuration

Click on the Set button to activate your settings and to save them until the camera is rebooted.

Click on the Close button to close the dialog. While closing the dialog, the system checks the entire configuration for changes. If changes are detected, you will be asked if you would like to store the entire configuration permanently.