Add single user to multiple roles
Planned
Is there a way we could add users to multiple roles?
My user story would be: I have 3 sites with multiple PTZ cameras at each sites and multiple staff for each site. All sites are joined into one system. I would like staff from site 1 to be able to control cameras at site 1 but only view cameras at sites 2 and 3. The same for staff from sites 2 to be able to control their cameras but only view the other sites.
Within a single sites I would also like to have staff able to PTZ control some cameras but not others. This is all achievable with multiple roles providing those specific accesses but a user can only be a member of one role at a time.
For example i could create roles for 'PTZ camera1', 'view camera 1', 'PTZ camera2', 'view camera2' etc. Then add staff to those roles to provide the appropriate permissions.
I have simplified this down to just PTZ or not to illustrate my requirement but obviously the intention is for this to allow a better granularity of access across all the user permissions available in NX.
Thanks, Adam
-
Hi Adam,
Thanks for reaching out.
Please, follow these steps to assign different permission to your new users:
Once defined, a Role may be assigned to any number of users.
To create a new User Role
1.Open the User Roles dialog using one of these methods:
•Open Main Menu, click on User Management, then click the Edit Roles button
•Right-click on Users in the Resource Tree and choose User Roles
•Right-click on a specific user in the Resource Tree and choose User Settings, then click the Edit Roles button
2.In the Role Info tab, click the New role button and enter a Role Name.
3.In the Permissions tab, check the actions the Role will be permitted to perform.
4.In the Cameras & Resources tab, select devices, web pages, tasks, etc. that will be available to users with this Role. Devices that have this icon are available to a Role by default because layouts that contain these devices are accessible to this Role.
5.In the Layouts tab, select the layouts that will be available for Users with this Role. Note that giving access to a layout will give the Role access to all current and future devices used in that layout.
6.Click Apply to save changes and continue, OK to save changes and close the dialog or Cancel to reject changes.
To edit a User Role
1.Open the User Roles dialog as described above.
2.Select the desired User Role in the left-hand list.
3.In the Permissions tab, check the actions the Role will be permitted to perform.
4.In the Cameras & Resources tab, select the devices, web pages, tasks, etc. that will be available for users with this Role. Devices that have this icon are available to a Role by default because layouts that contain these devices are accessible to this Role.
5.In the Layouts tab, select the layouts that will be available to users with this Role. Note that giving access to a layout will give the Role access to all current and future devices used in that layout.
6.Click Apply to save changes and continue, OK to save changes and close the dialog or Cancel to reject changes.
Please, let us know if you have any further questions.
0 -
Yes, what you have provided is clearly already available in the system and as with everything NX is simple and intuitive to implement. However what I need to do is add a single user into multiple roles.
The current system allows us to create multiple roles but when I add a user to a role they are removed from any other role they are currently in. Let’s look at the ‘User Input’ permission- if I have 3 PTZ cameras and a user that I would like to allow access to control the PTZ on only one of those three cameras but still be able to view the others how would I do that?
The permissions are role based, and not camera specific. I can create a role that has ‘user input’ enabled but that will only ever be for all the cameras they have access to. I cannot say that a role base access to ‘user input’ for camera 1 but not user input for cameras 2 and 3.
Hopefully this clarifies my question somewhat.
Thanks,
Adam0 -
Adam,
Now I catch the question and thanks for it. The answer is that you need to create multiple users with different permissions. At this point, as you mentioned, permissions are based on roles.
0 -
Hello Adam Webb
As my colleague has mentioned before, currently it isn't possible to assign multiple roles to one user. But it is a highly requested feature and we are about to start its implementation. At the first stage we will support multiple groups for LDAP users only. Hopefully this functionality will be available one release after the upcoming release.
0 -
Hi Veronika,
That's great news and I appreciate you updating this post- great customer service. I assume this tables it for around August-October next year?
0 -
At this stage it's hard to give any estimates, but end of next year sound more realistic to me.
0
Please sign in to leave a comment.
Comments
6 comments