Skip to main content
OpenEye Knowledge Base

Channel Partner User Groups Permissions

OpenEye Web Services (OWS) employs User Groups to make it easy to make changes, streamline setup and ensure that no one gets left out of updates or changes. Users in a User Group will have access to all permissions enabled in the User Group settings. User Groups created at a Channel Partner level will have permissions pertaining to the Customer Accounts controlled by the Channel Partner.

Channel Partner accounts have an Administrator User Group created by default. These default groups cannot be edited, and it will be necessary to create a new User Group to customize permissions.

To view and make changes to a User Group (other than a default one), click Edit next to the desired User Group under the Management tab: Management > User Groups.

This section will review the different menus and settings for the new or selected Channel Partner User Group.

Table of Contents

Users

Channel Partner Permissions

2-Step Verification

Customer Account Access

Web Services Permissions

Remote Client Permissions

Recorder Permissions

General Information

Channel Partner Users

Within this section, you can view Users in the User Group or add Users to the group by clicking Add User and checking the box next to each name to be included. Remove Users by clicking the X next to their names. Alternatively, select Enable Auto Include to include everyone; adding Users to a group in this manner automatically includes future users. See Add Users to a User Group for more information.

CP User Group Permissions Users.png

Channel Partner Permissions

This section manages User Group permissions for Channel Partner users, and the features and functions they are allowed to see and/or modify. Check the permissions you want to assign to the User Group. Click Save to preserve any changes.

CP User Groups Channel Partner Permissions.png

Channel Partner

Manage Accounts: Allows user to create, edit and disable accounts. User will be able to edit Global default settings.

Manage Unassigned Recorders: Allows user to assign recorders in the Unassigned Recorders section to an End User accounts.

Manage Channel Partner Users and Groups: Allows adding, editing, and deleting Channel Partner users and groups.

Manage User Group Auto Include: Allows user to enable or disable the ability to auto include all users in a user group.

Audit Log: Allows a user to view all log entries on the account from the Audit Log page.

System Design Tool: Allows user to access System Design Tool.

View All Designs: View designs by all users.

Alerts

View Alerts: Allows user to view alerts that they have been previously added to. User will only be able to see alerts on recorders / cameras from companies added to this user group.

Create / Edit Health Alert Rules: Allows user to create new health and storage retention alert rules. User can also edit any health and storage retention alert rules they are a member of.

Create / Edit Non-Health Alert Rules: Allows user to create new non-health alert rules. User can also edit any non-health alert rules they have permission to view.

Alert Administrator: Allows user to create any alert rule type. User will be able to see all alert rules, even if they are not a member.

Allow Third Party Integration Access: Allows user to configure Alert Rules to send to third party integrations. User will be able to access to the alerts generated by the alert rule using the Web Services SDK.

Reports

View Reports: Allows user to view reports that they have been previously added to. User will only be able to see reports from companies added to this user group.

Create / Edit Reports: Allows user to create and edit reports. User can only edit reports they have been previously added to.

Report Administrator: Allows user to create, edit and view all Reports, even if they are not added to the Reports as a user. User will be able to create and edit shared report templates.

Operations

Order & Shipping Report: Allows user to view a report that contains details on orders placed with OpenEye.

Account License

Manage Subscription Management: Allows user to manage the Subscription Management section for End User accounts. User will be able to edit subscription options, add services, and assign camera licenses to companies added to this user group.

View Subscription Management: Allows user to view the Subscription Management section for End User account.

View Subscription Audit Log: Allows user to view the Subscription Audit Log for End User accounts.

View Subscription Pricing: Allows user to view the Subscription Pricing for End User accounts.

Auto-License Assignment: Allows user to control if licenses can be automatically removed from unassigned licenses and added to new devices when they are added to End User accounts. This will require Apex 3.0 on the device that's performing auto assignment.

Auto-License Purchase: Allows user to control if licenses can be automatically purchased if there are not enough licenses available when assigning licenses to a recording devices.

Billing

View Subscription Billing Invoices: Allows user to view billing invoices for subscription accounts.

Receive Subscription Billing Notifications: Allows user to receive notifications for subscription billing events such as Invoice Ready emails.

Channel Partner 2-Step Verification

CP User Group Permissions 2 Step Verification.png

Enable 2-Step Verification

Using 2-step verification will help prevent unauthorized users from accessing an account with just a stolen password. When users sign in using a new device, 2-step verification will require them to enter both their password and a unique code that they receive on their phone. 

2-step verification is highly recommended.

Check the box to Enable 2-Step Verification.

Once enabled, the User will be prompted to enter a phone number the next time they log in. This phone number will be used to send verification codes whenever the user logs in on a new device.

Force Disable 2-Step Verification Requirement

In some cases you may have users who are unable to use 2-Step Verification (users who don't have acces to a phone, etc.). When this happens, these users may need to be exempted from 2-Step Verification.

To exempt users from 2-step verification, follow these steps:

  1. Create a new user group (optionally called "2-Step opt out") and add the users who should be exempted.
  2. Enable the "Disable 2-Step Verification Requirement" option on this page.

It is not necessary to add additional permissions to this group if the users exist in other groups with these permissions already configured.

Customer Account Access

CP User Group Permissions Account Access.png

Use this section to add or remove Customer Accounts to the User Group. All members of this User Group will have the ability to view and access all Customer Accounts added to this list. Customer Accounts not on this list will be invisible to members of this User Group.

  1. Click Add Account.
  2. Check the boxes next to each account to be included in the User Group. To include all existing and future accounts in the User Group, check the box Include all accounts in this User Group.
  3. Click Add when finished.
Web Services Permissions

Use the Web Services Permissions section to enable or disable User Group permissions pertaining to managing Web Services settings on the recorder, managing other Users and User Group permissions, and management of video clips and reports. Check the permissions you want to assign to the User Group. Click Save after checking permissions.

CP User Group Permissions Web Services Permissions.png

Administration

Administrative Access: Allows Channel Partner user full administrative control of End User Accounts specified in Account Access section of this group.

User Management

Manage Users and User Groups: Allows user to add, edit and delete Users and User Groups.

Manage Built-in User Groups: Allows user to view, add, and remove other users from the Built-In User Groups.

Manage Auto Include: Allows user to enable or disable the option to automatically include devices and cameras in User Groups.

Manage Access by External IP Address: Allows user to edit the External IP Address settings under the Remote Client Permissions page.

Locations

Allows Users to connect to recorders and add, edit or delete recorders and recorder groups.

Location Device Access: Allows Channel Partner user to connect to locations associated with the End User Accounts specified in Account Access with the permissions defined in the Location Permissions section.

Manage Locations and Location Groups: Allows Channel Partner user to register and assign new locations and location groups to the End User account.

Reports

Report Administrator: Allows user to create, edit and view all Reports, even if they are not added to the Reports as a user.

Alerts

Customize Alerts Permissions to allow users to view, create, edit, assign Alert Administrator access, and allow third-party integration access.

Alert Administrator: Allows user to create any alert rule type. User will be able to see all alert rules, even if they are not a member.

Allow Third Party Integration Access: This option allows users to configure Alert Rules to send to third party integrations. This option also provides access to the alerts generated by the alert rule using the Web Services SDK.

Point of Sale

 Allows Channel Partner users to manage POS Connect within the End User account.

Configure Point of Sale Options: Allows user to manage Point of Sale options.

Search Point of Sale Data: Allows user to search Point of Sale data.

Remote Client Permissions

These permissions allow administrators to limit the clients a user in a User Group can access. User access to remote clients should be restricted by need and location. Access to clients is managed in User Groups and can be restricted both by client type and by IP range. This gives Administrators the flexibility to enforce policies such as preventing Users from accessing video using the mobile app or accessing clients when not on the corporate network.

CP User Group Permissions Remote Client Permissions.png

Command Station

Allows users to connect to recorders using the Command Station application: Allows users to access recorders using the Command Station application.

View Shared Layouts: Allows viewing of shared camera and map layouts.

Manage Shared Layouts: Allows editing of shared camera and map layouts.

Edit Linked Cameras: Allows users to modify cameras in the Linked Cameras feature.

Push to Client: Allows alerts to be sent to users logged into Command Station. The ‘Push to Client’ option must be enabled for each user in the alert rule in order to receive alerts.

Force Alerts to be Acknowledged: This option forces the alert pane to remain open until all alerts are closed.

Web Browser

Allows users to connect to Web Services and recorders using a web browser: Allows users to connect to Web Services and recorders using a web browser.

Local Console

Allows users to connect to recorders on the Local Console: Allows users to connect to the recorder when using a monitor and keyboard / mouse attached to it.

Mobile Applications

Allows users to connect to recorders using Mobile Applications: Allows users to connect to recorders using iOS devices (iPhone, iPad, etc.) and Android devices (phones, tables, etc.).

Restrict Access by External IP Address

External IP Administrators can also restrict access to an External IP Address range. This prevents users from accessing OWS when they are outside of their corporate network. When enabled, the range of external IP addresses entered into the fields will have permission to access OWS. All other external addresses will be restricted.

  1. Enable restriction.
  2. Enter a range of External IP Ranges that OWS can be accessed from.
  3. Select to add additional ranges if necessary.

NOTE: Remote Client permissions are dependent on your OWS license. View the complete list of features by license type for more information.

Recorder Permissions

This section allows you to enable or disable User Group permissions pertaining to Recorders on Customer Accounts specified in Account Access. 

CP User Group Permissions Recorder Permissions.png

Video

Allows access to all video operations (each permission can also be enabled individually).

View Live Video: Allows viewing of live video.

View Recorded Video: Allows viewing of recorded video.

Export Video Locally: Allows exporting of recorded video to a local storage location (USB, Disc, etc).

Export Video to Web Services: Allows exporting of recorded video to Web Services.

Control PTZ: Allows pan, tilt and zoom control.

Set PTZ Presets: Allows setting PTZ presets.

Auto Focus: Allows users to activate the auto focus option on cameras.

Audio

Allows access to audio options (each permission can also be enabled individually).

Listen To Audio: Allows listening to live and recorded audio.

Two-Way Audio: Allows ability to push audio to an audio device.

Web Services

Allows management of all Web Services settings (each permission can also be enabled individually).

Manage Web Services Registration: Allows adding or removing recorders.

System User Management

Allows full control of all System User Management tasks (each permission can also be enabled individually).

Manage Roles: Allows adding, editing, and deleting roles.

Manage System Users: Allows adding, editing, and deleting system users.

NOTE: OpenEye recommends that any system connected to OpenEye Web Services (OWS) perform all user management through OWS. As such, the System User Management permissions should be rarely used.

Setup

Allows contorl of all system setup settings (each permission can also be enabled individually).

Access Power Off / Restart Options: Allows access to recorder power options.

Access Support Tools: Allows access to recorder support tools.

Manage Cameras: Allows adding, editing, and deleting of cameras.

Manage Holidays: Allows adding, editing, and deleting holidays.

Manage Intrusion Devices: Allows users to manage Intrusion devices.

Manage Licensing: Allows management of recorder licenses.

Manage Local Data Collection Devices: Allows user to manage local data collection devices such as Point of Sale terminals.

Manage Macros: Allows adding, editing, and deleting system macros.

Manage Network Configuration: Allows management of network settings.

Manage Schedules: Allows adding, editing, and deleting schedules.

Manage Sensor / Relay Settings: Allows management of sensor/relay settings.

Manage Software Upgrade: Allows user to perform software upgrades.

Manage Spot Monitor: Allows management of spot monitor.

Manage Storage Settings: Allows management of storage settings.

Manage System Settings: Allows management of system settings.

Manage System Logs: Allows viewing and exporting of log files.

Video Clip Permissions

Allows access to view and manage video clips uploaded by other Users, as well as Edit, Delete, Share or View Video Clips.

CP User Group Permissions Video Clip Permissions.png

Export

Export Video Locally: Allows exporting or recorded video to a local storage location (USB, Disc, etc).

Export Video to Web Services: Allows exporting of recorded video to Web Services.

Management

View and Download Any Video Clip: Allows viewing and downloading any video clip.

Edit Any Video Clip: Allows editing any video clip titles and notes.

Delete Any Video Clip: Allows permanently deleting any video clip.

View and Download Video Clips Added by User: Allows access to view and download video clips added to the account by the user.

Edit Your Video Clips: Allows editing your video clip titles and notes.

Delete Your Video Clips: Allows permanently deleting your video clips.

View Clips Shared with User: Allows access to video clips shared directly with the user. Ability to Download clips is controlled at the share level.

Video Clip Permissions: Allows access to all Video Clip Permissions.

Sharing

Share Video Clips: Allows email sharing of video clips.

Share With New Guest Accounts: Video clips can be shared with users who do not have Web Services accounts. Users without accounts will be given guest accounts.

General Information

Use this section to edit the Name or Descriptions of the User Group, or to delete the group entirely. Deleting a group cannot be undone and will remove all users from the group.

CP User Group Permissions General Information.png

Clone User Group
  1. Click Clone.

CP User Group Permissions Clone User Group.png

  1. Enter Name and Description.

NOTE: The cloned User Group must be given a unique name.

  1. Check which options from the original User Group you want to copy to the clone.
  2. Click Create.
  • Was this article helpful?