IPROTECT Access - Functionality group
iProtect manual | AVW-20240820 iProtect Access / Security | Functionality group  |
|
This manual represents the knowledge at the above-mentioned time. TKH security works non-stop to improve her products. For the most recent technical information please contact your consultant or dealer.
Table of contents
1. Introduction
The functionality group feature, introduced in iProtect 10.04, is essential to provide system users with the necessary menu options. This function must be set when configuring a new system.
When updating from a lower version, the system will create a functional group per user group based on the configured menu items.
The Functionality Group allows administrators to manage and customize specific UI features so that users see only the menu options relevant to their role. This improves the clarity and efficiency of the user interface while improving security by implementing the Four-Eyes Principle, where an administrator can enable specific features when a user is logged in.
By setting up functionality groups, organizations can streamline their access control processes, tailor the user experience to specific roles, and maintain robust security controls.
1.1 Purpose and Benefits
With this feature, user profiles can be created that display only the relevant menu options, resulting in a clearer and more efficient workflow. Two key benefits to name are:
Improved clarity: Users only see the menu options that are relevant to them, providing a clear and user-friendly interface.
Security feature - Four-Eyes Principle: This feature can also be used as a security measure. An administrator can enable specific functions after the user is logged in, adding an extra layer of security and control.
2. Implementation
Creating a functionality is done in 3 steps:
Step 1: Creating a Functionality Group
Go to Installation | Authorization | Functionality group.
Right-mouse click in the tree-view and click on “Add functionality group”
Name the group to describe its function (e.g., 'Security Guards', 'Receptionists', or 'Facility Managers').
Step 2: Set the functions for the Functionality Group
Open the group with the + sign and click on “Functionality group”
Select the UI functions that should be available to this group.
When the functions are set click on the save button.
Step 3: Link the functionality group to the user group
Go to Installation | Authorization | User group
Select the user group to which the functionality group should be linked.
Set the desired Functionality group to this user group.
3. Example Scenarios
Security Guards: Access to camera surveillance systems and the ability to open and block doors.
Receptionists: Limited to functions for creating and managing visitors.
Facility Managers: Access to badge management and other facilities-related functions such as maintenance of access points and building management.
Use as Four-Eyes Principle:
A user logs in with their standard login credentials.
There are no menu items visible, and the user needs to contact an administrator to get specific menu items displayed.
An administrator can then activate specific functions for this user based on the situation and necessity.
This process requires both parties (user and administrator) to be present, providing additional security.
4. Functionality group elements
Below are described the functions that can be activated, this releases certain menu items for system users who participate in the functionality group.
Some functions are only visible when the correct license is activated.
Functionality | Menu options visible |
|---|---|
Alarm system |
|
Alfapass |
|
Auditdata |
|
Authorization group |
|
Camera |
|
Company parking |
|
Cosmos access |
|
Custom event |
|
Custom group |
|
Default | This is the default template, displaying the menu items that are not listed in this document as exceptional functions. |
Dutch government |
|
Elevator |
|
| |
Export service |
|
Free category |
|
Guarded area |
|
Hta export |
|
Intercom |
|
keybadge |
|
keycabinet |
|
Keymap |
|
LDAP |
|
License plate recognition |
|
Logic expression |
|
Person class |
|
Reader round |
|
Salto |
|
Server synchronization |
|
User defined record |
|
Visitor |
|
Walk route |
|