Users Tab
Use the Users tab to create and manage user accounts and to change the way the camera manages the users settings.
General Users Settings
The general users settings page sets the public user access level. This access level is a predefined set of user permissions that allows the camera to be accessed without logging on. Available permissions depend on the model of the camera that you are using.
The general users settings page sets the open or closed authentication mode. With open authentication, users can view video and use the camera API without validating user credentials. With closed authentication, users must log on to the camera with a user name and password.
The general users settings page also allows you to change the way the camera manages users and groups. These settings can be managed on a camera-to-camera basis (local mode) or by using a centralized server to apply changes to multiple cameras (remote mode).
Users Settings
The users settings page defines the access levels assigned to individuals logged on to the camera. Use this page to create, modify, or delete user accounts for Administrators, Managers, Operators, and Viewers. User accounts are created to limit permissions.
The users settings page defines the access levels assigned to individuals logged on to the camera. Use this page to create, modify, or delete user accounts for Administrators, Managers, and Viewers. User accounts are created to limit permissions.
SELECTING THE USERS AND GROUPS SETTINGS
1. Place your mouse pointer over the Users tab.
2. Select General Settings from the drop-down menu.
3. Select a Public Access Level setting by reviewing the descriptions on the page.
4. Select one of the following Authentication modes:
Open Authentication: Allows users to view video and use the camera API without validating user credentials. When Open Authentication is selected, you can select “Require password for PTZ control” to limit PTZ control to authenticated users.
Closed Authentication: Requires users to possess valid credentials to view video and access the camera API. Before selecting Closed
Authentication, ensure that your video management system supports Closed Authentication mode.
5. Select one of the following User and Group Management modes to manage permissions of users and groups:
Local Mode: The camera manages users and groups locally. Any changes to users and groups affect only the camera that you are accessing. The default setting is Local Mode.
Remote Mode: The camera authenticates and manages users through a Lightweight Directory Access Protocol (LDAP) server supported by
Microsoft ® Active Directory ® . This allows administrators to tie cameras and group permissions into existing single sign-on services (SSO).
Selecting Remote Mode disables Local Mode and all management is done on the server.
WARNING: Remote Mode settings are advanced controls. Contact your network administrator to obtain the required information to configure remote settings.
6. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
C1327M-A (5/13) 33
ENABLING REMOTE MODE
1. Place your mouse pointer over the Users tab.
2. Select General Settings from the drop-down menu.
3. Select Remote Mode. The default setting is Local Mode.
4. Type the IP address or host name of the LDAP server in the LDAP Server box.
5. Type the port over which the camera communicates with the LDAP server in the LDAP Port box. The default port for LDAP communications is 389.
6. Type the distinguished name (DN) that is the basis for LDAP searches in the Base DN box.
7. Provide the template to format the user name (provided when the user logs on to the camera) for searches in the LDAP directory in the Bind
DN Template box.
8. Provide the LDAP search query for users found in the base DN in the Search Template box. The search must match an entry in the LDAP user record to the bind name (user name).
9. Type the Group Mappings for each of the camera’s four user groups: a.
Type the common name (CN) and DN for the group of users to whom you want to grant admin access in the Admins box.
b.
Type the CN and DN for the group of users to whom you want to grant manager access in the Managers box.
c.
Type the CN and DN for the group of users to whom you want to grant operator access in the Operators box.
d.
Type the CN and DN for the group of users to whom you want to grant viewer access in the Viewers box.
10. Type the credentials of a user who can be authenticated through the LDAP server in the User and Password boxes.
NOTE: Remote Mode (LDAP authentication) will not be enabled if you leave these boxes blank or do not provide valid credentials; this ensures that you cannot lock yourself out of the camera with invalid or incorrect LDAP settings.
11. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
CREATING A NEW USER
1. Place your mouse pointer over the Users tab.
2. Select Users from the drop-down menu.
3. Select the Access Level for the user:
Admins: Permissions include access to all camera settings.
Managers: Permissions include access to all settings except this user cannot modify user permissions or restore factory default settings.
Viewers: Permissions include view video and use the API.
4. Click the Username box and type a user name (2 to 32 alphanumeric characters). User names are not case-sensitive and are saved in lowercase characters.
5. Click the Password box and type a password (4 to 64 alphanumeric characters). Passwords are case-sensitive.
6. Click the Retype Password box and retype your password.
7. Click the Save button to save the settings and create a new user (the new user profile appears in the Users box on the left side of the page), or click the Reset button to clear all of the information you entered without saving it.
34 C1327M-A (5/13)
EDITING A USER
1. Place your mouse pointer over the Users tab.
2. Select Users from the drop-down menu.
3. Click the user profile that you want to edit from the Users box on the left side of the page.
4. If required, select a different Access Level for the user.
5. Double-click in each of the password boxes to highlight the text. Type the new information in each password box.
NOTE: The Username cannot be modified; this box is read-only.
6. Click the Save button to save the settings, or click the Reset button to clear all of the information you entered without saving it.
DELETING A USER
1. Place your mouse pointer over the Users tab.
2. Select Users from the drop-down menu.
3. Click the user profile that you want to delete from the Users box located on the left side of the page.
4. Click the Delete User button. A dialog box opens and the following message appears “Are you sure you want to delete this user?”
5. Click OK. The user profile is deleted from the Users box.
NOTE: The “admin” user cannot be deleted.
C1327M-A (5/13) 35
