The Group Access Control Lists dialog allows managing the camera's user groups that are assigned in the Users and Passwords dialog.
The Public Access row makes the corresponding screens and functions publicly available, i.e. accessing them does not require a user name and password. If a checkbox in this row is activated, editing the group access rights below is not possible. If you would like to set individual access rights for certain screens or functions, you need to deactivate the checkbox in this row, then set the access rights for the individual groups.
The maximum number of groups is 25.
Minimum length for group names is 3, maximum length is 16 characters.
Allowed characters are "A-Z", "a-z", "0-9", "." (dot), "-" (hyphen) and "_" (underscore).
Note that all entries are case-sensitive.
It is not possible to rename or delete the admins
group.
Once you have finished configuring the groups, you should always store the settings in the camera's permanent memory. If the configuration is not stored in the camera's permanent memory, the changed groups will only be valid until the next camera reboot. Be careful as this may create security issues.
Use the Close button at the end of the dialog as it will automatically ask you to store the camera configuration to the camera's permanent memory.
Resetting this dialog to factory settings will not only reset the options of this dialog, but also those of the Users and Passwords! If you are asked to enter a user name and password after resetting to factory defaults, remember to enter admin
as user name and meinsm
as password.
Per factory default, most of the camera's screens and functions are publicly accessible. If you would like to protect the camera from public access, proceed as described in section Protecting a Camera From Public Access.
By default, new groups are created without any access rights. If the desired checkboxes are not accessible (gray), deactivate the corresponding checkbox in the Public Access row at the top of the dialog.
When activating a Screen, the software will set the required minimum access rights in the Function section automatically. Click on the More button at the bottom of the dialog if this section is not visible. These checkboxes will remain checked even if the screen has been deactivated for this particular group; they have to be removed one by one, if required.
Activate the Remove Group option behind the groups you would like to delete and click on Set at the bottom of the dialog.
Once you have finished configuring the groups, you should always store the settings in the camera's permanent memory. If the configuration is not stored in the camera's permanent memory, all deleted groups will again be valid after the next camera reboot!
If a group has been deleted, all users assigned to the deleted group in the Users and Passwords dialog will be assigned to the undefined
group.
The admins
group cannot be deleted. Users of this group always have access to the administration menu.
The access rights are split into three sections:
Screen/View controls access to the camera's screens.
Function controls access to specific functions of the camera.
Configuration controls access to the camera's configuration parameters.
Access to the camera screens in this section can be set individually for every group.
In order to ensure that the minimum access rights are granted, the corresponding access rights in the Function section will be granted automatically when activating a certain screen (even if the checkboxes are gray as they are publicly accessible). When deactivating a screen or view, these access rights will remain checked and have to be unchecked one by one. For additional information on this topic, see the Minimum Access Rights section.
Access Right |
Description |
---|---|
Guest |
The Guest screen allows viewing the camera's live image, setting the frame rate within the preset limits and accessing the Live screen by clicking on the Menu link at the bottom of the page. See also |
Live |
The Live screen of the MOBOTIX camera displays the current images of the camera. Use the dropdown menus to access certain functions of the image controls and the camera administration or open the Setup Menu to see links to all image and event control dialogs. The Admin Menu contains all dialogs for configuring the camera. |
Player |
Use the Player screen to view and download the events stored in the internal or the external image storage of the camera. See also |
MultiView |
Use the MultiView screen to combine several cameras in different patterns and to assign special functions (highlighting, focus on alarm, ...) for the individual cameras. See also |
Eventstream |
This right grants access to the camera for applications such as MxMC, MxWeb, MxBell App and other video management systems that use the MOBOTIX Eventstream SDK. Likewise, MxDisplay and MxThinClient use the Eventstream interface for accessing the camera. NoteUsers of a group with the Admin right always have access to the Eventstream interface. See also |
HTTP API |
Controls the access rights required for using MxControlCenter and MxEasy. See also |
The access rights in this section are required by the different Screens for proper operation, but can be removed one by one, if required. Click on the More button at the bottom of the dialog if this section is not visible.
Access Right |
Description |
---|---|
Info |
The Info function of the MOBOTIX camera provides access to the Camera Status dialog showing various information on the camera (model, version, software version, network configuration, ...). |
Guest Image |
This function is required to see the live image of the Guest screen (see above) of the MOBOTIX camera. It shows the current live image with a reduced frame rate. |
Live Image |
This function is required to see the live image of the Live screen (see above) of the MOBOTIX camera. It shows the current live image with maximum frame rate. |
Image Link |
This function allows getting images from the MOBOTIX camera's CGI interface that delivers different images. See also |
Events |
The Player and MultiView screens require this function for displaying the stored event images. See also |
API (QC, SB) |
This function allows accessing the camera's HTTP API interface, which allows remote-controlling the camera. This interface is also used by the Quick Controls (pulldown lists above the live image) and the softbuttons of the different screens. See also |
The access rights in this section provide access to different configuration sections of the MOBOTIX camera.
Access Right |
Description |
---|---|
Admin |
This rights grants access to the Admin menu of the MOBOTIX camera and all of its configuration dialogs (network parameters, event storage on file servers, transmission profiles, audio and phone settings, ...). See alsoAdministration Menu section in the Table of Contents of the online help. |
Image Settings |
This rights grants access to the image control dialogs of the MOBOTIX camera's Setup Menu. See alsoSetup Menu > Image Control section in the Table of Contents. |
Event Setup |
This rights grants access to the event control dialogs of the MOBOTIX camera's Setup Menu. See alsoSetup Menu > Event Control section in the Table of Contents of the online help. |
Specific screens require certain functions for proper operation. For example, the Guest screen requires the Guest Image function, the Live screen requires the Live Image function (see Function table).
To facilitate setting access rights, all required functions of a screen will be set automatically if a certain screen is being activated for a group (the required Function checkboxes are activated automatically). The access rights added automatically comprise all required functions for a screen to work properly.
Once set, the checkboxes can be deactivated again manually. One group may thus have access to the Live screen, using the functions controlled by API (QC, SB) is not allowed. Likewise, it is possible to grant access to the Guest screen for a group using the Guest Image function and also allow accessing the Info function.
The checkboxes of the Public Access row grant public access to camera screens, functions and configuration sections, i.e. you will not need a user name or password to access these areas of the camera. An exception is the Admin configuration section, which cannot be opened for public access.
If you would like to set individual access rights for certain screens or functions, you need to deactivate the checkbox in the Public Access row, then set the access rights for the individual groups.
To prevent the camera from unauthorized access, you should execute the following steps:
It is recommended to start by resetting all users, passwords and group definitions to the Factory default settings.
This will also reset the admin
user's password to meinsm
(Users and Passwords dialog)!
Deactivate all checkboxes of the Public Access row.
Create the required user groups in this dialog and the users in the Users and Passwords dialog.
Make sure that you change the password for the admin
user!
In order to restrict access to a camera to a specific user group or control organizations in highly regulated work environments, you can open the Scheduled Access Control dialog. For additional information on this topic, see the Scheduled Access Control by the "Supervisor" help page.
Click on the Set button to activate your settings and to save them until the next reboot of the camera.
Click on the Factory button to load the factory defaults for this dialog (this button may not be present in all dialogs).
Click on the Restore button to undo your most recent changes that have not been stored in the camera permanently.
Click on the Close button to close the dialog. While closing the dialog, the system checks the entire configuration for changes. If changes are detected, you will be asked if you would like to store the entire configuration permanently.