Channel Partner User Groups Permissions
Channel Partner accounts have an Administrator User Group created by default. These default groups cannot be edited, and it will be necessary to create a new User Group to customize permissions.
To view and make changes to a User Group (other than a default one), click Edit next to the desired User Group under the Management tab: Management > User Groups.
This section will review the different menus and settings for the new or selected Channel Partner User Group.
Table of Contents
Channel Partner Users
Within this section, you can view Users in the User Group or add Users to the group by clicking Add User and checking the box next to each name to be included. Remove Users by clicking the X next to their names. Alternatively, select Enable Auto Include to include everyone; adding Users to a group in this manner automatically includes future users. See Add Users to a User Group for more information.
Channel Partner Permissions
This section manages User Group permissions for Channel Partner users, and the features and functions they are allowed to see and/or modify. Check the permissions you want to assign to the User Group. Click Save to preserve any changes.
Channel Partner
Manage Accounts: Allows user to create, edit and disable accounts. User will be able to edit Global default settings.
Manage Unassigned Recorders: Allows user to assign recorders in the Unassigned Recorders section to an End User accounts.
Manage Channel Partner Users and Groups: Allows adding, editing, and deleting Channel Partner users and groups.
Manage User Group Auto Include: Allows user to enable or disable the ability to auto include all users in a user group.
System Design Tool: Allows user to access System Design Tool.
View All Designs: View designs by all users.
Alerts
View Alerts: Allows user to view alerts that they have been previously added to. User will only be able to see alerts on recorders / cameras from companies added to this user group.
Create / Edit Health Alert Rules: Allows user to create new health and storage retention alert rules. User can also edit any health and storage retention alert rules they are a member of.
Create / Edit Non-Health Alert Rules: Allows user to create new non-health alert rules. User can also edit any non-health alert rules they have permission to view.
Alert Administrator: Allows user to create any alert rule type. User will be able to see all alert rules, even if they are not a member.
Allow Third Party Integration Access: Allows user to configure Alert Rules to send to third party integrations. User will be able to access to the alerts generated by the alert rule using the Web Services SDK.
Reports
View Reports: Allows user to view reports that they have been previously added to. User will only be able to see reports from companies added to this user group.
Create / Edit Reports: Allows user to create and edit reports. User can only edit reports they have been previously added to.
Report Administrator: Allows user to create, edit and view all Reports, even if they are not added to the Reports as a user. User will be able to create and edit shared report templates.
Operations
Order & Shipping Report: Allows user to view a report that contains details on orders placed with OpenEye.
Channel Partner 2-Step Verification
Enable 2-Step Verification
Using 2-step verification will help prevent unauthorized users from accessing an account with just a stolen password. When users sign in using a new device, 2-step verification will require them to enter both their password and a unique code that they receive on their phone.
2-step verification is highly recommended.
Check the box to Enable 2-Step Verification.
Once enabled, the User will be prompted to enter a phone number the next time they log in. This phone number will be used to send verification codes whenever the user logs in on a new device.
Force Disable 2-Step Verification Requirement
In some cases you may have users who are unable to use 2-Step Verification (users who don't have acces to a phone, etc.). When this happens, these users may need to be exempted from 2-Step Verification.
To exempt users from 2-step verification, follow these steps:
- Create a new user group (optionally called "2-Step opt out") and add the users who should be exempted.
- Enable the "Disable 2-Step Verification Requirement" option on this page.
It is not necessary to add additional permissions to this group if the users exist in other groups with these permissions already configured.
Customer Account Access
Use this section to add or remove Customer Accounts to the User Group. All members of this User Group will have the ability to view and access all Customer Accounts added to this list. Customer Accounts not on this list will be invisible to members of this User Group.
- Click Add Account.
- Check the boxes next to each account to be included in the User Group. To include all existing and future accounts in the User Group, check the box Include all accounts in this User Group.
- Click Add when finished.
Web Services Permissions
Use the Web Services Permissions section to enable or disable User Group permissions pertaining to managing Web Services settings on the recorder, managing other Users and User Group permissions, and management of video clips and reports. Check the permissions you want to assign to the User Group. Click Save after checking permissions.
Administration
Administrative Access: Allows Channel Partner user full administrative control of End User Accounts specified in Account Access section of this group.
User Management
Manage Users and User Groups: Allows user to add, edit and delete Users and User Groups.
Manage Built-in User Groups: Allows user to view, add, and remove other users from the Built-In User Groups.
Manage Auto Include: Allows user to enable or disable the option to automatically include devices and cameras in User Groups.
Manage Access by External IP Address: Allows user to edit the External IP Address settings under the Remote Client Permissions page.
Recorders
Allows Users to connect to recorders and add, edit or delete recorders and recorder groups.
Recorder Access: Allows Channel Partner user to connect to recorders associated with the End User Accounts specified in Account Access with the permissions defined in the Recorder Permissions section.
Manage Recorders and Recorder Groups: Allows Channel Partner user to register and assign new recorders and recorder gorups to the End User account.
Video Clip Management
Allows access to view and manage video clips uploaded by other Users, as well as Edit, Delete, Share or View Video Clips.
Access Other Users’ Video Clips: Allows access to view and manage video clips uploaded by other users based on the permissions below.
Video Clip Permissions: Allows access to all Video Clip Permissions.
Edit Video Clips: Allows editing video clip tiles and notes.
Delete Video Clips: Allows permanently deleting video clips.
Share Video Clips (With User Accounts): Allows email sharing of video clips.
Share Video Clips (Without User Accounts): Allows email sharing of video clips.
View and Download Video Clips: Allows viewing of video clips.
Reports
Report Administrator: Allows user to create, edit and view all Reports, even if they are not added to the Reports as a user.
Alerts
Customize Alerts Permissions to allow users to view, create, edit, assign Alert Administrator access, and allow third-party integration access.
Alert Administrator: Allows user to create any alert rule type. User will be able to see all alert rules, even if they are not a member.
Allow Third Party Integration Access: This option allows users to configure Alert Rules to send to third party integrations. This option also provides access to the alerts generated by the alert rule using the Web Services SDK.
Point of Sale
Allows Channel Partner users to manage POS Connect within the End User account.
Configure Point of Sale Options: Allows user to manage Point of Sale options.
Search Point of Sale Data: Allows user to search Point of Sale data.
Remote Client Permissions
These permissions allow administrators to limit the clients a user in a User Group can access. User access to remote clients should be restricted by need and location. Access to clients is managed in User Groups and can be restricted both by client type and by IP range. This gives Administrators the flexibility to enforce policies such as preventing Users from accessing video using the mobile app or accessing clients when not on the corporate network.
Command Station
Allows users to connect to recorders using the Command Station application: Allows users to access recorders using the Command Station application.
View Shared Layouts: Allows viewing of shared camera and map layouts.
Manage Shared Layouts: Allows editing of shared camera and map layouts.
Edit Linked Cameras: Allows users to modify cameras in the Linked Cameras feature.
Push to Client: Allows alerts to be sent to users logged into Command Station. The ‘Push to Client’ option must be enabled for each user in the alert rule in order to receive alerts.
Force Alerts to be Acknowledged: This option forces the alert pane to remain open until all alerts are closed.
Web Browser
Allows users to connect to Web Services and recorders using a web browser: Allows users to connect to Web Services and recorders using a web browser.
Local Console
Allows users to connect to recorders on the Local Console: Allows users to connect to the recorder when using a monitor and keyboard / mouse attached to it.
Mobile Applications
Allows users to connect to recorders using Mobile Applications: Allows users to connect to recorders using iOS devices (iPhone, iPad, etc.) and Android devices (phones, tables, etc.).
Restrict Access by External IP Address
External IP Administrators can also restrict access to an External IP Address range. This prevents users from accessing OWS when they are outside of their corporate network. When enabled, the range of external IP addresses entered into the fields will have permission to access OWS. All other external addresses will be restricted.
- Enable restriction.
- Enter a range of External IP Ranges that OWS can be accessed from.
- Select to add additional ranges if necessary.
NOTE: Remote Client permissions are dependent on your OWS license. View the complete list of features by license type for more information.
Recorder Permissions
This section allows you to enable or disable User Group permissions pertaining to Recorders on Customer Accounts specified in Account Access.
Video
Allows access to all video operations (each permission can also be enabled individually).
View Live Video: Allows viewing of live video.
View Recorded Video: Allows viewing of recorded video.
Export Video Locally: Allows exporting of recorded video to a local storage location (USB, Disc, etc).
Export Video to Web Services: Allows exporting of recorded video to Web Services.
Control PTZ: Allows pan, tilt and zoom control.
Set PTZ Presets: Allows setting PTZ presets.
Auto Focus: Allows users to activate the auto focus option on cameras.
Audio
Allows access to audio options (each permission can also be enabled individually).
Listen To Audio: Allows listening to live and recorded audio.
Two-Way Audio: Allows ability to push audio to an audio device.
Web Services
Allows management of all Web Services settings (each permission can also be enabled individually).
Manage Web Services Registration: Allows adding or removing recorders.
System User Management
Allows full control of all System User Management tasks (each permission can also be enabled individually).
Manage Roles: Allows adding, editing, and deleting roles.
Manage System Users: Allows adding, editing, and deleting system users.
NOTE: OpenEye recommends that any system connected to OpenEye Web Services (OWS) perform all user management through OWS. As such, the System User Management permissions should be rarely used.
Setup
Allows contorl of all system setup settings (each permission can also be enabled individually).
Access Power Off / Restart Options: Allows access to recorder power options.
Access Support Tools: Allows access to recorder support tools.
Manage Cameras: Allows adding, editing, and deleting of cameras.
Manage Holidays: Allows adding, editing, and deleting holidays.
Manage Intrusion Devices: Allows users to manage Intrusion devices.
Manage Licensing: Allows management of recorder licenses.
Manage Local Data Collection Devices: Allows user to manage local data collection devices such as Point of Sale terminals.
Manage Macros: Allows adding, editing, and deleting system macros.
Manage Network Configuration: Allows management of network settings.
Manage Schedules: Allows adding, editing, and deleting schedules.
Manage Sensor / Relay Settings: Allows management of sensor/relay settings.
Manage Software Upgrade: Allows user to perform software upgrades.
Manage Spot Monitor: Allows management of spot monitor.
Manage Storage Settings: Allows management of storage settings.
Manage System Settings: Allows management of system settings.
Manage System Logs: Allows viewing and exporting of log files.
General Information
Use this section to edit the Name or Descriptions of the User Group, or to delete the group entirely. Deleting a group cannot be undone and will remove all users from the group.
Clone User Group
- Click Clone.
- Enter Name and Description.
NOTE: The cloned User Group must be given a unique name.
- Check which options from the original User Group you want to copy to the clone.
- Click Create.