In this article
Introduction
Administration, control, and access of various entities in a Portal play a key role in application management with respect to an organization. The level of granularity with which the functions, settings, rules, and procedures can be defined eases the process of streamlining how an organization uses the system. This can only be achieved by varying role definitions of each user to equip them with different levels of authoritative and contributive options within the Portal.
Concept
User Roles determine the access level and permissions of a person authorized to use VIDIZMO. In a default VIDIZMO installation, there are certain predefined roles assigned to users with a default set of permissions. We will be looking at these roles and their permissions in more depth below:
Roles and Permissions
In VIDIZMO Digital Evidence Management System, roles define the permissions which control access to various features within the Digital Evidence Management system. Each portal user is assigned a certain role based on their required access control. Below is a list of pre-configured roles along with their set of permissions
Note: VIDIZMO also allows its valuable customers to customize these roles with designed set of permissions. Please contact VIDIZMO Support Team for more information.
Permission Reference
The following table provides the default permissions for the pre-configured roles in VIDIZMO DEM.
Note: The permissions discussed in the table below, are applicable if the portal's Security Policy is set to Decide when Publishing. This means that access permissions on every media shall be the sole determinant of who can view this media. Also, there are certain media-related permissions such as Sharing, Downloading and Commenting that when enabled on a Group, will only be applicable on a media file if the same permissions are enabled on that media's publish settings.
Please note that actions Allowed for a user role are only applicable on the media accessible to the user in questui.
| Permission | Administrator | Manager | Moderator | Contributor | Viewer | Anonymous |
|---|---|---|---|---|---|---|
| Login Access | ||||||
| Login to the Portal | Allowed | Allowed | Allowed | Allowed | Allowed | Not Allowed |
| Search Access | ||||||
| User Search | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Evidence Search | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Case Search | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Metadata Search (Evidence/Case) | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Search within Closed Captions | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Case Management | ||||||
| Creating a Case | Allowed | Allowed | Allowed | Configurable | Configurable | Not Allowed |
| Adding existing Evidence to a Case | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Uploading Evidence files within a Case | Allowed | Allowed | Allowed | Allowed | Not Allowed | Not Allowed |
| Modifying Case Settings | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Deleting Case | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Adding Case to Quick Access section | Allowed | Allowed | Allowed | Allowed | Allowed | Not Allowed |
| Sharing Case (If Case Sharing Enabled) | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Grant Access Rights (via Limited Share) | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Viewing Chain of Custody of a Case | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Downloading Chain of Custody of a Case | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Unpublishing Case | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Inspecting Case | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Moving Case from one Folder to another | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Evidence Management | ||||||
| Uploading Evidence | Allowed | Allowed | Allowed | Allowed | Not Allowed (If UGC Disabled) | Not Allowed |
| Modifying Evidence Basic Details (Title, tags, closed captions file) | Allowed | Allowed | Allowed | Only their own | Not Allowed | Not Allowed |
| Modifying Evidence Access Rights Policy | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Modifying Evidence Publishing Rules | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Grant Access Rights (via Limited Share) | Allowed | Allowed | Allowed | Configurable | Configurable | Not Allowed |
| Deleting Evidence | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Moderating Evidence | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Evidence Tamper Detection (If App Enabled) | Allowed | Allowed | Allowed | Only their own | Not Allowed | Not Allowed |
| Viewing Evidence Chain of Custody | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Downloading Evidence Chain of Custody | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Evidence Downloading (if Allow Downloading is checked in Publish Settings) | Allowed | Allowed | Allowed | Configurable | Configurable | Configurable |
| Evidence Sharing (if Allow Sharing is checked in Publish Settings) | Allowed | Allowed | Allowed | Configurable | Configurable | Allowed |
| Unpublishing an Evidence | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Moving Evidence to other Folder | Allowed | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed |
| Adding Evidence to Quick Access section | Allowed | Allowed | Allowed | Allowed | Allowed | Not Allowed |
| Viewing Notes (if Allow Notes is checked in Publish Settings) | Allowed | Allowed | Allowed | Configurable | Configurable | Configurable |
| Adding Notes (if Allow Notes is checked in Publish Settings) | Allowed | Allowed | Allowed | Configurable | Configurable | Not Allowed |
| Evidence Re-upload | Allowed | Allowed | Allowed | Only their own | Not Allowed | Not Allowed |
| Viewing Annotations | Allowed | Allowed | Allowed | Configurable | Configurable | Allowed |
| Adding Annotations | Allowed | Allowed | Allowed | Configurable | Configurable | Not Allowed |
| Evidence can be Assigned to | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed (if External Sharing is Allowed) |
| Custom Attributes Tab Access | Allowed | Allowed | Allowed | Configurable | Configurable | Not Allowed |
| Share Evidence link via Email | Allowed | Allowed | Allowed | Configurable | Configurable | Configurable |
| Evidence Inspection | ||||||
| Inspecting Evidence (Can be Controlled with Access Settings) | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| User Access | ||||||
| View and Edit Account Information | All Users | All Users | Only their own | Only their own | Only their own | Not Allowed |
| Invite/Register Users | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Create Group of Users | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Add members is a Group | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Remove members from a Group | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Edit group details | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Create permissions for Groups | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Admin Access | ||||||
| Configure Portal's Security Policy | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Edit Portal Settings | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| User Administration | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Configuring Storage Providers -Add or update Storage Providers | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Configuring Encoding Profiles | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Setup Wizard (Complete Workflow details) | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
| Configure E-mail Templates and SMTP Protocols | Allowed | Allowed | Not Allowed | Not Allowed | Not Allowed | Not Allowed |
Note: In the table above, configurable permissions can be controlled using Group Permissions. To learn more about it, see: Understanding User Groups to Manage Access Rights and Permissions.