Advanced User Management

MCS from version 1.3.0

Overview

The Advanced User Management feature in MCS introduces Access Groups and Role-Based Access Control to streamline and secure user access management. This feature ensures secure and efficient user access management.

Access Groups: Allow administrators to group MCS features, settings, devices and resources (e.g., Channels, Outputs, Layouts) and restrict user access to only the necessary areas.
Roles: Define user permissions by specifying the actions they can perform and the features they can access. Each user is assigned to one role, ensuring access aligns with their responsibilities.

Benefits

Improved Security: Prevents unauthorized access to sensitive features.
Simplified Management: Centralizes and streamlines user access control.
Enhanced Efficiency: Ensures users interact only with relevant resources, reducing errors and clutter.
Audit-Ready: Provides clear documentation of user access for compliance and security audits.
Role-Based Permissions: Ensures users have access only to the features and actions relevant to their role.

Scenario for MCS Admin: Configuring Access Groups and Roles

You manage two studios, Studio A and Studio B, with two employee types: managers and operators. Each studio’s cameras must be accessible only to its respective staff, with permissions tailored to their roles.

Step 1: Create Access Groups

Access Groups:
- Create studio_A_cameras and studio_B_cameras groups (with Type: Access).
Assign Cameras to The (Access) Group:
- Assign Studio A’s cameras to studio_A_cameras (access) group and Studio B’s cameras to studio_B_cameras (access) group in the Group field.

Step 2: Configure Roles

Create Roles:
- studio_A_managers, studio_A_operators, studio_B_managers, and studio_B_operators.
Assign Permissions:
- Managers: Full access (Admin, Controller, Viewer positions) to their studio’s cameras (View, Edit, Create, Delete, Enable/Disable Monitoring).
- Operators: Limited access (Controller, Viewer) to their studio’s cameras (View, Enable/Disable Monitoring only).

Outcome

The cameras from each studio will now be assigned to separate access groups.

Users assigned the studio_A_managers role will now have the ability to View, Edit, Create, Delete, Disable Monitoring, and Enable Monitoring only the cameras (resources) of Studio A.

Users assigned the studio_B_managers role will now have the ability to View, Edit, Create, Delete, Disable Monitoring, and Enable Monitoring only the cameras (resources) of Studio B.

Users with the studio_A_operators role will have the ability to View, Disable Monitoring, and Enable Monitoring only the cameras (resources) of Studio A. They will not have permissions to Edit, Create, or Delete these cameras.

Users with the studio_B_operators role will have the ability to View, Disable Monitoring, and Enable Monitoring only the cameras (resources) of Studio B. They will not have permissions to Edit, Create, or Delete these cameras.

This setup restricts access to cameras by studio and role, ensuring secure, tailored permissions while preventing unauthorized access to resources.

This article provides the steps for configuring advanced user management in MCS.

TAG Video System