The following information can be used to help you understand which actions the users or roles in Genetec ClearID™ can perform.
Identity management
| Actions | Account owners (and API key) | Site owners | Area owners | Area approvers | Identity supervisors | Authenticated users |
|---|---|---|---|---|---|---|
| Create identities | ✓ 1 | |||||
| Update identities | ✓ 1 | |||||
| View private information about identities | ✓ 1 | |||||
| List identities when adding to an area or role | ✓ 1 | ✓ | ✓ | ✓ | ✓ | ✓ |
| Create sites | ✓ 1 | |||||
| Delete identities | ✓ 1 | |||||
| View direct reports | ✓ 1 | ✓ | ||||
| Manage direct reports | ✓ 1 | ✓ | ||||
| Transfer direct reports | ✓ 1 | ✓ |
1 Users assigned as a delegate for another user do not inherit the permission.
Area management
| Actions | Account owners (and API key) | Site owners | Area owners | Area approvers | Identity supervisors | Authenticated users |
|---|---|---|---|---|---|---|
| Create and delete sites | ✓ 1 | |||||
| Edit site details | ✓ 1 | ✓ | ||||
| Assign site owners | ✓ 1 | ✓ 1 | ||||
| Create and delete areas | ✓ 1 | ✓ | ||||
| Edit area automatic provisioning attributes | ✓ 1 | ✓ | ||||
| Edit area name | ✓ 1 | ✓ | ||||
| View all private areas of a site | ✓ 1 | ✓ | ||||
| Assign area owners | ✓ 1 | ✓ | ||||
| Assign area approvers | ✓ 1 | ✓ | ✓ 1 | |||
| Edit area visibility (Public or Private) | ✓ 1 | ✓ | ✓ | |||
| Edit approval workflow | ✓ 1 | ✓ | ✓ | |||
| Edit area schedules | ✓ 1 | ✓ | ||||
| View area configuration and access list | ✓ 1 | ✓ | ✓ | ✓ | ||
| Add people or roles to areas | ✓ 1 | ✓ | ✓ | |||
| Remove people or roles from areas | ✓ 1 | ✓ | ✓ | |||
| Approve access request for an area | ✓ 1 | ✓ | ✓ | |||
| Edit period and schedule before approving access request | ✓1 | ✓ | ✓ | |||
| Schedule area access reviews | ✓ | ✓ | ||||
| Receive and complete area access reviews | ✓ 1 | ✓ | ✓ | ✓ | ||
| View area access reviews report | ✓ | ✓ |
1 Users assigned as a delegate for another user do not inherit the permission.
Role management
| Actions | Account owners (and API key) | Site owners | Role owners | Role managers | Identity Supervisor | Any user on account |
|---|---|---|---|---|---|---|
| Create and delete roles | ✓ 1 | |||||
| Assign role owners | ✓ 1 | |||||
| Assign role managers | ✓ 1 | ✓ 1 | ||||
| Change automatic provisioning rules and configuration for a role | ✓ 1 | ✓ | ||||
| Edit role name, description, notes | ✓ 1 | ✓ | ||||
| List roles when adding to an area or access request | ✓ 1 | ✓ | ✓ | |||
| Manually add or remove a person from a role | ✓ 1 | ✓ | ✓ | |||
| Submit an access request on behalf of a role | ✓ | ✓ | ||||
| Receive and complete role access reviews | ✓ | ✓ | ||||
| Remove identities from a role | ✓ 1 | ✓ | ✓ |
1 Users assigned as a delegate for another user do not inherit the permission.
Visitor management
| Actions | Account owners (and API key) | Visit requester | Requester supervisor | Site owners | Visit hosts | Area approvers |
|---|---|---|---|---|---|---|
| Visit event | ||||||
| Create a visit event | ✓ 1 | |||||
| Add guests to an event or remove guests from an event | ✓ 1 | ✓1 | ||||
| Approve or reject a visit event | ✓ | |||||
| Approve or reject specific guest access to an area | ✓ | |||||
| Create an event (copy event) from an existing event | ✓ 1 | ✓ | ✓1 | |||
| Cancel event | ✓ 1 | ✓1 | ||||
| View list of upcoming events | ✓ 1 | ✓1 | ||||
| View event details | ✓ 1 | ✓ | ✓1 | ✓ | ||
| Visitor management configuration | ||||||
| Edit visitor management configuration (Area) | ✓ 1 | ✓ | ||||
| Edit visitor management configuration (Site) | ✓ 1 | ✓ | ||||
1 Users assigned as a delegate for another user do not inherit the permission.