Vodafone Business Surveillance – IP470 Installation User Guide
C1 – Public
Page 21
6.
Roles and permissions
Introducing Role-based access control
Vodafone Business Surveillance Server based on industry standard best practice, called Role-based Access
Control (RBAC) to regulate users’ access to the server, groups and encoders. Rather than assign individual
permissions to a user on a case-by-case basis, it is first necessary to create a Role that contains all the
desired permissions for a user, and assign
that
role to a user.
The permissions within Vodafone Business Surveillance Server fall into three different categories:
Server permissions
The ability to manage the server, including managing domains, server settings, backup/restore
and role editing
Account management
The ability to create/edit/delete groups, encoders and users
Encoder usage
The ability to control how encoders are configured and used within viewing clients
Each category has several sub-categories, each of which contain many granular permissions for each sub-
category. The following table outlines the different categories, sub-categories, and number of available
permissions within each.
Role
Contains one or more permissions from the following
…
Server permissions
(Server-wide administrators only)
Account management
Encoder usage
Domain management
3 permissions
User role management
3 permissions
Server configuration
8 permissions
Backup/restore database
3 permissions
Encoder firmware
2 permissions
Manage group accounts
3 permissions
Manage encoder accounts
4 permissions
Manage user accounts
7 permissions
Viewing client permissions
19 permissions
Accessing edge recordings
4 permissions
Configure streaming
parameters
3 permissions
Encoder configuration
11 permissions
Encoder maintenance
2 permissions
There are four built-in roles (that can’t be modified or deleted):
Server Administrator– All permissions available within the system
Standard Administrator - Users within the Customer organisation performing admin tasks. These
roles has permissions within Account management and Encoder usage
