Who Can Watch a Camera
Two things decide what a person sees: their permissions, and each camera's Security tab.
The four permissions
You give these through security roles (see Security Roles Explained), under the KamoCameras group:
- View Cameras — the Cameras menu and the camera window. On its own it shows no camera at all; which cameras appear is the Security tabs' decision.
- Manage Cameras — naming cameras, switching them on and off, groups, and every Security tab.
- Manage Camera Sites — connecting and removing sites, stream addresses and passwords, recorders, finding cameras and the advanced settings. It is separate on purpose: the person who decides who may watch the lobby doesn't need the camera passwords.
- Access All Cameras — every camera in the organization, whatever its Security tab says.
The Security tab
Every camera and every group has one, under Settings → Cameras → Cameras. Add the people who may watch:
- particular people;
- a department — which includes every department beneath it, so "Operations" covers "Operations › Night shift";
- a job title;
- a team.
A person can watch a camera when any of these is true:
- they have Access All Cameras; or
- the camera's own Security tab names them, their department (or one above it), their job title or one of their teams; or
- the camera is in a group whose Security tab does, and that group is switched on.
Groups
A group is a set of cameras, such as "Front of house" or "Loading dock". Giving people access to a group gives them every camera in it, now and later. A camera can be in several groups.
Switching a group off stops the access it gives — it doesn't switch its cameras off, because they may be shared through other groups. Switching a camera off stops it for everyone, at once.
When changes take effect
- Switching a camera off ends everyone's live view of it immediately.
- Removing someone's access applies to the next time they open the camera; a view already on their screen continues until they close it.
- People who manage cameras can preview any camera from Settings with Watch, to check it works, without being added to its Security tab.
