Milestone XProtect Advanced VMS 2014 - Manual (Page 179)

Milestone XProtect ® Advanced
VMS 2014
Administrator's Manual
www.milestonesys.com 179 Management Client elements
Overall Security tab (roles)
On the Overall Security tab, you set up overall rights for roles. For every component available in your
system, decide whether to Allow or Deny users with the role the rights to access and use different
areas on the relevant component.
The overall security settings only apply to the current site.
You can associate a user with more than one role. If you select Deny on a security setting for one role
and Allow for another, the Deny right permission overrules the Allow right permission.
The Overall Security tab is available in both XProtect Corporate and XProtect Expert, but the tab
gives you the possibility to change more functionality in XProtect Corporate than in XProtect Expert.
This is because you can set up differentiated administrator rights in XProtect Corporate, while such
rights are not available in XProtect Expert. However, you can set overall rights for a role that uses
XProtect Smart Client in both XProtect products.
In the following, the descriptions show what happens on each individual right for the different system
components if you select Allow for the relevant role. If you use XProtect Expert, you can see which
settings are not available to you under each system component.
For every system component or functionality, the full system administrator can use the Allow or Deny
check boxes to set up security permissions for the role. Any security permissions you set up here is
set up for the whole system component or functionality. So if, for example, you select the Deny check
box on Cameras, all cameras added to the system are unavailable for the role. In contrast, if you
select the Allow check box instead, the role can see all added cameras to the system. The result of
selecting Allow or Deny on your cameras is that the camera settings on the Device tab then inherit
your selections on the Overall Security tab so that either all cameras are available or unavailable to
the particular role. If you want to set individual security permissions for individual cameras or similar
device channels, you can then only set these individual permissions on the tab of the relevant system
component or functionality if you have turned off any overall settings for the system component or
functionality on the Overall Security tab.
The descriptions below also apply to the rights that can be configured via the MIP SDKs.
If you switch your license from XProtect Corporate to XProtect Expert, you can only do this if you have
not set any security rights for the role for functionality that is not available in XProtect Expert.
Therefore, to complete such a switch, make sure that you remove all security rights that are available
to XProtect Corporate only.
Management Server
Security right Description
XProtect
Expert
Full control
Enables the right to manage all security entries on this part
of the system.