in this chapter we will learn how to set users and authorities for the system
here you will configure the users who will be able to connect to the system
and which actions these users will have permission to perform
the default user of the system is admin
only two actions can be done on the admin user
changing the password-
it is highly advisable to change the default password when you set the system for the first time
and at any time you feel that the admin password has been compromised
adding or editing the security questions-
it is highly advisable to set these questions and change them if they were compromised
they will only be used to restore the admin password in case it was forgotten
failing to set these questions will deny you from accessing the system in case you forgot your password
in such case you will have to contact the technical support of provision-ISR for assistance
you can not edit the name or any of the permissions of the admin user
it is advisable to prepare the required permission group before adding new users to the system
the permission group is used as a preset of permissions that could be used
when creating new users or editing existing ones
click on edit permission group to access the permission group manager
you will find 3 pre-made groups
administrator- has all the local and remote capabilities over the system
it cannot be changed or altered in any way
advanced- has ability to access the system
playback, backup and set the basic parameters of the system from both local and remote
it doesn't have permission for advanced configuration, it can be edited to fit the user needs
common- can only log into the system,
view the live stream and use the two-way audio from both local and remote
it can be edited to fit the user needs if required
in order to add a new permission group click on the plus icon on the top right
input the name for the permission group
next. you will have to set the system permissions. tick all the permissions you want to grant the group
the last stage is setting camera permissions
in the list of cameras appearing below set the permissions for each one of the cameras
note that you have two sets of permissions- local and remote
make sure you set both of them
click on add to complete the setting and save the new group
if you wish to edit an existing permission group click on the pencil icon next to the group's name
set the permission as you require and confirm
you can click on the trash can icon to delete a permission group
administrator, advanced and common users cannot be deleted
after creating the permission groups you can continue adding new users
click on edit user and then on the + icon on the top right
a new window will pop up, input the user name and password
you can set the email address of the user
the email address will be used for administrative reasons only and cannot be used by the system
if the new user will connect remotely to the system you combined a specific MAC address for that user
so he will be able to connect from a device with the same MAC address only
click on add to save the new user and close the window
to edit a user click on the down arrow in the Edit column
click on edit to open the edit options
here you will find enable checkbox to disable a user from the system without deleting it
closed permission control-
this will block the user from viewing his permissions on the permission window
group- to change the permission group for that user
bind- to bind a MAC address for the user
remark- to add any remark for the user
recover password- will restore the password for the user to the default password 1 2 3 4 5 6
now we will move on to system security
here we will find black and white lists and preview on logout
black and white lists will allow you to configure which devices are allowed to access the system
to activate it tick enable and set the desired way of work
enable white list should be used to create a list which will contain only devices that are allowed
to connect to the system. enable black list should be used to create a list
which will contain devices that are not allowed to connect to the system
note that even admin account will not be able to connect from unauthorized devices
you can add devices to the list by IP address or by MAC address
add devices to the list as desired and click on apply to save the changes
next we have preview on logout
this will allow you to configure which channels will be available for preview
when local users are logged out
set the desired channels and save to apply the changes
the last section is the online users
here you will be able to view which users are connected to the system
and how many live view and preview channels they are occupying
this finalizes the account and authority configuration