Add a Permission Group with Individual Members

This is the Add icon.

1. Click the Add Permission Group button in the top-right corner of the Permission Groups list. A New Permission Group screen will open.

2. Enter a name and a description for the new Permission Group in the Group Name and Group Description fields.
3. Select a member for the new Permission Group by clicking on Search for a User to open a drop-down list of Orchid Fusion/Hybrid VMS users. Find and click on a member. As soon as you select a member, another list will appear so you can make another selection (if needed).
   1. Press Esc if you don’t need to make another selection.
   2. To remove a member, click the X to the right of the member name.

*Available members (or Orchid Fusion/Hybrid VMS users) are established with the Users feature found on the System menu. For more details, please refer to Users. Other potential members may come from authentication providers the system has been configured to use.

*The software provides two locations at which you may assign user permissions. With the User feature, you assign permissions (indirectly) by selecting the Permission Group(s) to which the user belongs. With the Permission Groups feature, you assign users as members of Permission Groups with specific abilities and access. While you don’t have to select any members immediately upon adding a Permission Group, until you do, the Permission Group will essentially be inactive.

By default, each new Permission Group will be granted Live abilities for All Servers, All Cameras.

4. To assign specific, limited permissions for this Permission Group, use the Permissions Granted and Permissions Revoked features.
5. After all of the permissions are set, press the Save Group button.

Permissions Granted

The Permissions Granted feature provides a way to grant custom combinations of abilities to selected servers and cameras. In the example below, the Permission Group is given the ability to view live video on all servers and cameras. With the addition of another permission set, this same Permission Group will be able to playback video from all of the cameras on one of the servers, and one camera on a second server.

1. Go to the Permissions Granted box.

2. Select an ability for the new Permission Group by clicking on Type an Ability to open a drop-down list of abilities. Available selections include the following: Live, Playback, Export, PTZ, and All (which includes the other four abilities).
3. Click on the ability you want to grant. As soon as you select an ability, another list will appear so you can make another selection (if needed).
   1. Press Esc if you don’t need to make another selection.
   2. To remove an ability, click the X to the right of the ability name.
4. Mark the All Servers, All Cameras checkbox if you want this permission set to apply to all of the registered Orchid Core VMS servers and associated cameras. You may also select this option if you want this permission set to apply to most of the servers and cameras; you may use a Revoke permission set in conjunction with this one to eliminate the unwanted servers and cameras. Keep in mind how this will impact cameras and servers that are added to the system later. (If marked, proceed to step number 7. If left unmarked, proceed to step 5.)

*If you create a Permission Group that uses the All Servers, All Cameras selection, that Permission Group will automatically have the same access to any new cameras you add to the system.

5. Select specific servers and cameras for this permission set by unmarking the All Servers, All Cameras checkbox; then click on Search for an Orchid or Camera to open a drop-down list of registered servers and cameras. (Orchid Core VMS servers will be represented by an Orchid Core VMS logo; individual cameras will be represented by a thumbnail.)
6. Click on a server or camera. As soon as you select a server or camera, another list will appear so you can make another selection (if needed).
   1. Press Esc if you don’t need to make another selection.
   2. To remove a server/camera, click the X to the right of the server/camera name.
7. When the permission set is complete, press the Done button.

8. If you need to add another permission set for this Permission Group, click the Grant Another Permission button, then repeat steps 1 through 8.
9. To edit a permission set, click the Edit pencil that corresponds to the set you want to edit.
10. To delete a permission set, click the Remove button. (The set will be removed immediately.) If you don’t see the Remove button, enter edit mode first by clicking the Edit pencil.

Permissions Revoked

The Permissions Revoked feature provides a way to eliminate the Permission Group’s ability to do certain things for selected servers and cameras. This can be a great shortcut especially when, for example, there is only one camera out of many that requires some restricted access. In the sample below, the Permission Group’s ability to view recorded video and export video has been revoked on two cameras. By adding another permission set, this Permission Group will lose all abilities for another camera.

*Although not shown here, this Permission Group was granted All abilities on All Servers, All Cameras. Permissions Revoked settings will override Permissions Granted settings. Keep in mind how these settings will impact cameras and servers that are added to the system later.

1. Go to the Permissions Revoked box.

2. Select the ability you want to take away from the Permission Group by clicking on Type an Ability to open a drop-down list of abilities. Available selections include the following: Live, Playback, Export, PTZ, and All (which includes the other four abilities).
3. Click on the ability you want to eliminate. As soon as you select an ability, another list will appear so you can make another selection (if needed).
   1. Press Esc if you don’t need to make another selection.
   2. To remove an ability from the revoked list, click the X to the right of the ability name.
4. Mark the All Servers, All Cameras checkbox if you want this permission set to apply to all of the registered Orchid Core VMS servers and associated cameras. (If marked, proceed to step 7. If left unmarked, proceed to step 5.)
5. Select specific servers and cameras for this permission set by unmarking the All Servers, All Cameras checkbox; then click on Search for an Orchid or Camera to open a drop-down list of registered servers and cameras. (Orchid Core VMS servers will be represented by an Orchid Core VMS logo; individual cameras will be represented by a thumbnail.)
6. Click on a server or camera. As soon as you select a server or camera, another list will appear so you can make another selection (if needed).
   1. Press Esc if you don’t need to make another selection.
   2. To remove a server/camera from the revoked list, click the X to the right of the server/camera name.
7. When the permission set is complete, press the Done button.

8. If you need to add another revoked permission set for this Permission Group, click the Revoke Another Permission button, then repeat steps 1 through 8.
9. To edit a permission set, click the Edit pencil icon that corresponds to the set you want to edit.
10. To delete a permission set, click the Remove button. (The set will be removed immediately.) If you don’t see the Remove button, enter edit mode first by clicking the Edit pencil.