Categories
Knowledge Support Support exacqVision Enterprise Categories Products

ESM adds server to root group if user has only one group visible

Description

If a user has only one group visible to them, an attempt to add a server to the group will inadvertently add the server to the root group. And hence be invisible to a user if they are not root user.

<br>

Tested version

5.1.9.115770

<br>

Platform

All

<br>

Steps to reproduce

  1. Add a sub group to root group (testGroup)
  2. Add a user to that group (testUser)
  3. Log out of ESM, and sign in as testUser
  4. Attempt to add a server to your group (testGroup)

<br>

Expected result

Server should be added and displayed on server list page

<br>

Actual result

Server is added but will not be displayed on testUser’s server list page.

This server will be displayed on the root group’s server list page.

<br>

Workaround

Only Add a server through ESM UI if you have multiple groups visible to you.

You can also add a server through the ESM API no matter how many groups you have visible to you.

<br>

Categories
User Guides Categories Products exacqVision Integrations

How to Create a User in Kantech for Security Integration with exacqVision

Configuring an Operator to Receive Events from the EntraPass server

1. Login to the Workstation using installer credentials.

2. Add a new Workspace (System > Workspace).

    a. Select all applications, gateways, controllers, doors, relays, and inputs under their respective tabs.

        The screenshots below show the workspace permissions for the ‘exacqws’ workspace.

        All applications, gateways, controllers, doors, relays, and inputs are selected.








3. Add a new Security Level (System > Security Level).

    a. Click on the ‘New’ icon and add a new security level. This example shows we have named it ‘exacqsl’.

    b. Workstation > Operation

        

    c. Note that only the top-level Door, Relay, Input, and Alarm System are selected.

        The sub-items are not selected.

        

    d. Scroll down to Workspace > Devices. Select Door, Relay, Input, and Integrated Panel sub-items.

        Select the Read checkbox on the left, as shown.

        

    e. Leave all other options and sub-options to their default values.

4. Add a new Operator (System > Operator).

    a. Create a new operator ‘exacquser’. Remember to enable ‘Concurrent Logins’ settings as this will

        allow you to connect from multiple servers using the same operator credentials.



    b. On the Security tab, select the ‘Login schedule’ and set it to use ‘Always valid’.

        This will allow an exacqVision Server to always remain connected to EntraPass and receive events.



    c. For the ‘Security level’ and ‘Workspace’ fields, select the security level and workspace you created in the steps above. Leave all other options to their default values.

<br>

Configuring an Operator to Send Commands to EntraPass

To increase the security of the exacqVision – EntraPass integration, exacqVision clients require the credentials for a “more privileged” operator if they wish to perform output actions. Some operators may not have the permission to access certain doors, in which case, the controls for performing certain actions are hidden/disabled from the user. It is still possible that an operator is permitted to view that door, but they may not have the security level to unlock a door. This information is currently unavailable to exacqVision Server at this time, so when an operator tries to unlock a given door, that operation will fail. 

To create additional operators with additional security levels on EntraPass, repeat steps 2, 3, and 4 above with the following adjustments.

1. Uncheck restricted doors from the list of doors (or relays, inputs, etc.) in the ‘Create New Workspace’ section. In the screenshot below an operator can only access two out of the nine doors configured.



2. Under System > Security Level > Workstation, make sure that the door lock/unlock and relay activation privileges are granted to the new user when creating a new security level. The example below shows a new security level that allows an operator to lock/unlock a door, enable/disable a door reader and activate/deactivate a relay.



3. When sending a command to EntraPass, the exacqVision Client will prompt for the second operator credentials.



4. Enter the credentials for the second operator. Only those doors, relays, and inputs that this user can access will be highlighted in the client and made available for sending commands to EntraPass.

<br>

How-to-Create-a-User-in-Kantech-for-Security-Integration-with-exacqVision-1.pdf