Skip to main content
All CollectionsGetting Started
Roles
Roles

Roles and Permissions Mapping - Who Has Access to What

Updated over a week ago

Overview

Arcules uses a system of prebuilt roles to grant access to certain areas and features within the ecosystem. Roles can be stacked together to quickly form the basis of enabling users, or groups to have access to everything they need in the platform to achieve the needs of their job roles.

There are three types of Roles available in Arcules:

  • Standalone Roles, which can be used on their own

  • Add-on Roles, which only work when used in conjunction with Standalone Roles.

  • Legacy Roles which pertain to features in Arcules currently in Maintenance Mode

Table Conventions:

〇 = Feature supported.
x = Limited support for this feature.
※ = Indicates a comment.
- = Does not apply to this feature.

Standalone Roles

Accounts Payable

The default landing page is the "Settings" page

This role's permissions include:

  • Manage Subscription.

Subscriptions Page:

  • Access to view the organization's subscription

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Basic User

The default landing page is the "Dashboard" page.

This role's permissions include:

Views Page:

  • Access to the views shared for the user - but no access to edit/delete a shared view

  • Access to videos - live feed, playback

  • Perform forensic search

Widgets available:

Site Health:

  • Health Status

  • Notifications

Cloud Analytics

  • People Count

  • Heat Map

  • Parked Vehicle Count

Device and Edge Analytics

  • Occupancy status

  • Thermal Status

  • I/0 model

Business Analyst

The default landing page is the "Dashboard" page.

This role's permissions include: Get device information, view business analytics.

Insights Page:

This role is specific to a user, and the insights dashboard/s is not shared with any other user in the organization.

  • Will have access to the Add a new dashboard, Edit an existing, and Delete a dashboard

  • Has the ability to add Multiple Dashboards

  • Access to the ‘Add Widget’ page which will display all devices (Videos) in the organization where Business Analytics have been enabled for

  • Ability to add the widgets to the dashboard

Notifications Page:

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to the Arcules Support Center

Widgets available:

Site Health:

  • Health Status

  • Notifications

Cloud Analytics

  • People Count

  • Heat Map

  • Parked Vehicle Count

Device and Edge Analytics

  • Occupancy status

  • Thermal Status

  • I/0 model

Case Manager

The default landing page is the "Dashboard" page.

This role's permissions include:

  • Handle Camera Views

  • Edit All Cases

  • View Live Video

  • Manage Evidence

  • Users and User Groups View

  • Get Device Information

Views Page:

  • Will have access to the Views shared for the user - but will not have access to Edit/Delete a Shared View

  • Ability to Create a New View - and Add/Edit/Delete the view created by this user

  • When creating a new view, the user will have access to all devices (videos) in the organization

  • Access to Videos - Live feed, Playback, Export Video to a case

  • Perform forensic search

Cases Page:

  • Ability to Create a new Case, and Edit/Delete and existing case

  • Access to evidence, add/edit permissions and download evidence

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Enhanced User

The default landing page is the "Dashboard" page.

This role's permissions include:

Views Page:

  • Will have access to the Views shared for the user - but will not have access to Edit/Delete a Shared View

  • Ability to Create a New View - and Add/Edit/Delete the view created by this user

  • Access to Videos - Live feed, Playback, Export Video to a case

  • Perform forensic search

Cases Page:

  • Ability to Create a New Case, and Edit/Delete and existing case

  • Access to evidence, add/edit permissions and download evidence

Sites Page:

  • Access to view Sites and Locations that are shared with the user

  • Will have access to Filter by Site/Location

  • Can add a New Location - select a data center

  • Can edit/delete an existing location

  • Will have access to view the list of devices (Cameras/Gateways) that are within accessible locations, including the Health Status

  • Can Add/Edit/Delete devices (Gateway/Cameras)

  • Can Configure devices - Edit Camera Settings

  • Will have access to View Live feed and playback

  • Will have access to the interactive map and click on the marker to navigate to the Devices list for that location

Installer

The default landing page is the "Dashboard" page.

This role's permissions include:

Views Page:

  • Will have access to the Views shared for the user - but will not have access to Edit/Delete a Shared View

  • Ability to Create a New View - and Add/Edit/Delete the view created by this user

  • When creating a new view, the user will have access to all devices (videos) in the organization

  • Access to Videos - Live feed, Playback

  • Perform forensic search

Sites Page:

  • Access view Sites and Locations for the Organization

  • Will have access to Filter by Site/Location

  • Can add a New Location - select a data center

  • Can edit/delete an existing location

  • Will have access to view the list of all devices (Cameras/Gateways) for the Organization, including the Health Status

  • Can add/edit/delete devices (Gateway/Cameras)

  • Can configure devices - Edit Camera Settings

  • Will have access to View Live feed and playback

  • Will have access to the interactive map and click on the marker to navigate to the Devices list for that location

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

IT Manager

The default landing page is the "Dashboard" page.

An IT Manager has access to most the features within the organization

Note : The IT Manager role covers all standalone roles except Case Manager role and View Manager role and doesn't include add-on roles, which are extra permissions that need to be added.

Widgets available:

Site Health:

  • Health Status

  • Notifications

Cloud Analytics

  • People Count

  • Heat Map

  • Parked Vehicle Count

Device and Edge Analytics

  • Occupancy status

  • Thermal Status

  • I/0 model

Live Video Only User

The default landing page is the "Views" page.

This role's permissions include:

Access Live Video in Views

Views Page:

  • Will have access to the live Views shared for the user - but will not have access to edit/delete a Shared View

  • Access to Videos - Live feed only

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Security Operator

The default landing page is the "Dashboard" page.

This role's permissions include:

  • Handle Camera Views

  • View Live Video

  • View Users

  • Get Device Information

  • View Location Cameras

  • Manage Evidence

  • View System Analytics

  • Manage Alarms

  • View Floor Plans

Views Page:

  • Will have access to the Views shared for the user - but will not have access to Edit/Delete a Shared View

  • Ability to Create a New View - and Add/Edit/Delete the view created by this user

  • When creating a new view, the user will have access to all devices (videos) in the organization

  • Access to Videos - Live feed, Playback, Export Video to a case

  • Perform forensic search

Cases Page:

  • Ability to create a new Case, and Edit/Delete and existing case

  • Access to evidence, add/edit permissions and download evidence

  • Ability to view Cases that have been shared to this user

  • Access to and download evidence

    Note: People with just the Security Operator Role and without access to Sites and Locations will not have Add/Edit/Delete access to cases and act as a Case Viewer.

Alarms Page:

  • Access to Alarms triggered by rule-based analytic/notifications

  • Ability to Assign alarm to self, mark as complete, mark as false, add comments

  • Access to Open, Unassigned, In Progress, and Closed Alarms

  • Access to New, Old, High and Low priority Alarms

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

System Integrator

The default landing page is the "Dashboard" page.

This role's permissions include:

Sites Page:

  • Access view Sites and Locations for the Organization

  • Will have access to Filter by Site/Location

  • Can add a New Location - select a data center

  • Can edit/delete an existing location

  • Will have access to view the list of all devices (Cameras/Gateways) for the Organization, including the Health Status

  • Can add/edit/delete devices (Gateway/Cameras)

  • Can configure devices - Edit Camera Settings

  • Will have access to View Live feed and playback

  • Will have access to the interactive map and click on the marker to navigate to the Devices list for that location

  • Perform forensic search

Rules Page:

  • Can add new Rules based on Analytics and Device Health Status

  • Can configure/delete existing rules

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Viewer

The default landing page is the "Views" page.

This role's permissions include:

Views Page:

  • Will have access to the Views shared for the user - but will not have access to edit/delete a Shared View

    Note: The add-on role "View Manager" needs to be added to access all available views (both private and shared.

  • Access to Videos - Live feed, and Playback only

  • Perform forensic search

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Add-on Roles

The default landing page for add-on roles is determined by the primary role of the user.

API User

This role's purpose includes:

Note: This role cannot be used on its own.

Continuous Live Viewing

This role disables the auto-logout function, so that users with this role can stay logged in without getting timed-out.

Note: This role cannot be used on its own.

Configure Analytics

This role enables users to configure Analytics (i.e. People in Region) for available devices.

Note: This role cannot be used on its own.

Configure Rules

This role enables users to add and set-up Rules.

Note: This role cannot be used on its own.

I/O Relay Operator

This role enables users to trigger I/O Relay Modules through widgets on the dashboard.

Note: This role cannot be used on its own.

PTZ Operator

This role enables users to control PTZ panels when hovering over any PTZ enabled video player.

Note: This role cannot be used on its own.

Remote Device Access (Limited)

This role enables users to remote access to devices recognized and connected to the Arcules gateway on the same network via the Devices page

Supported devices include:

  • Cameras

  • AXIS Access Control

  • IoT Devices

Note: This role cannot be used on its own.

Remote Device Access (Unrestricted)

This role enables users to remote access to devices accessible by the Arcules gateway, for Cam to Cloud devices from anywhere via the Support Tools page in Settings

Supported devices include:

  • Cameras

  • AXIS Access Control

  • IoT Devices

Note: This role cannot be used on its own.

View Manager

The default landing page is the "Views" page.

This role's permissions include:

  • Access to Views.

  • Access to all Views on the Views Page, regardless of whether a view is private or shared

  • Perform forensic search

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Legacy Roles

Access Control Admin

The default landing page is the "Dashboard" page.

This role's permissions include:

Access Control Page:

  • Will have access to configuring hardware

  • Ability to create Access Schedules, add Access Holidays, add Access Levels

  • Can assign Access Levels to users

  • Access to assign cards and credentials to users

  • Access to view Events

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Access Control Viewer

The default landing page is the "Dashboard" page.

This role's permissions include:

  • View AC Events
    ​

Access Control Page:

  • Ability to view access control Events log

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

Access Control Operator

The default landing page is the "Dashboard Page"

This role's permissions include:

  • Perform AC Actions

  • Configure AC Settings

  • View AC Events

  • Manage Cardholders

Access Control Page:

  • Ability to create Access Schedules, add Access Holidays, add Access Levels

  • Access to view Events

Notifications Page:

  • View all Notifications user is part of or assigned to

Profile Page:

  • Ability to edit profile settings, change password, and notifications settings

  • Access to Support Center

General Examples of Role Assignments

Jim - Security Staff

Jim's primary job is to monitor the camera feeds, search for video of incidents, and export the evidence. Jim only needs access to his location.

To accomplish his goals, some general roles to assign would be:

Lisa - Location IT Staff

Lisa's primary job is to maintain the gateway health, devices attached to the gateway, and set up views for users or groups for their location. They are not supposed to see devices or views outside of their location.

To accomplish her goals, some general roles to assign would be:

Alan - System Administrator

Alan's primary job is to ensure all devices are healthy and configured, configure SSO, and ensure users and groups are provisioned properly. Also, he will assist with any access issues to views. Alan needs global access to all items within the organization.

To accomplish his goals, some general roles to assign would be:

Have questions? We're here to help! 👋 Reach out to the Arcules team through the chat icon at the bottom right-hand corner of your screen.

Did this answer your question?