Migrate from local users to cloud users + dictate minimum credentials

Answered

Follow

Tuli Dem

• November 11, 2020 18:16

Hi guys,

It would be great if there was a way to migrate local user accounts to cloud user accounts without having to recreate users and copy permissions and layouts etc. We have some large systems that have come through since V2.X, back when there weren't even user roles yet. those users are all marks as custom.

It would also be wonderful and in my opinion crucial to have the ability to dictate minimum credential complexity. When adding new cloud users the system is set up in a way where users create their own passwords. This is nice but also creates a large vulnerability. 

Thanks for reading and hopefully considering my request. 

0

• 

  Permanently deleted user

  • November 12, 2020 02:51

  Hello Tuli,
  Thanks for the feedback.

  About the way to migrate local user to the cloud – I agree, it would be useful, but, alas, we currently don't have it in the roadmap. 

  About minimum credential complexity – we already have security requirements for passwords for local and cloud users:

  • Passwords must be at least 8 characters
  • Passwords must contain at least two types of Symbols (e.g. lowercase + uppercase, lowercase + number, lowercase + non-roman symbol)
  • Passwords must not match any of the 1000 most popular passwords (black list updated each release) 

  Is it enough or you'd prefer these requirements to be more strict?

  0

  Comment actions Permalink
• 

  Tuli Dem

  • November 12, 2020 16:49

  Hi Aleksandr,
  Thanks for the quick reply.

  I guess I’ll have to manually transition users over. It’ll be a real chore...

  As for the password complexity, I would really prefer if the minimum requirement was 1x uppercase, 1x lowercase, 1x number, 1x special character.

  When giving users access to critical cameras, it’s imperative that they are secure.

  Thank you.

  0

  Comment actions Permalink
• 

  Tagir Gadelshin

  • November 13, 2020 15:07

  Tuli Dem
  yep, as Aleksandr mentioned, we don't plan to introduce this feature in the nearest future.

  
  But for the time being, you can try to make a script, that will use /ec2/getUsers and /ec2/saveUser, also

  /ec2/getAccessRights
  and
  /ec2/setAccessRights

  So you can create full clones of current users using our API, but cloud ones. I think it shouldn’t be so difficult to do it using curl or python.

  0

  Comment actions Permalink

Please sign in to leave a comment.