People and access

Administrators decide who can use your portal and what each person can do, under Settings > People & access. Each person signs in with their own email address. Only administrators invite people, change their access and manage roles. Supervisors and Read-only people can open these pages without changing anything or viewing credentials. What each role allows is in Roles and permissions.

Invite a person

1. Open Settings > People & access and select Invite user.
2. Enter the Email, optionally a Display name, and choose the Role. Operator is preselected.
3. If your portal has roles of its own, tick any under Your roles. To give only those, choose Only the roles below as the role.
4. Select Send invitation.

The person's Manage page opens and shows the Invitation link once, after every send. A badge reads Email accepted when the email service took the message, or Email unconfirmed when it did not. Neither proves the email arrived. If it does not arrive, select Copy link and send the link to the person yourself. Anyone who has the link can set the account's password, so share it only with that person.

The invitation link lasts 24 hours. Follow the password requirements shown on the activation page; breach checking depends on your portal's policy. Until activation, the person shows Invitation pending. Use Resend invitation on their Manage page for a new link.

If the invite page says Outbound email is off., no invitation is emailed: copy the link and send it yourself. Inviting an email address that already has an account opens that account instead.

Change a person's access

Select Manage in a person's row. Under Account and role you can change the Display name, the Role and the ticks under Your roles, or clear Account can sign in. A person who cannot sign in is listed as Disabled, and any pending invitation link stops working. Select Save changes. Operators and Supervisors can also get extra permissions on this page.

Changing a person's roles, a permission or Account can sign in signs them out of the portal and the phone app within about two minutes. They sign in again with the new access. A video link they shared stops working for good if it is opened after they lose the access they needed to share it, or after their account is disabled or deleted; see Alarms and incidents.

Choose where each role applies

On the person's page, Sites for the main role offers All sites, including new ones or Only these Sites. Each selected role under Your roles has its own Site choice. Review every role: another role can still grant access to a Site you removed from the main role. Save the intended assignments with Save changes.

At its Sites a role can allow video, alarm handling and response procedures, arming, outputs and talk. Handling an alarm or incident needs permission at every Site involved. Configuring arming and Site controls, changing contacts, cases, evidence holds, reports, Settings, People, audit, saved views and the procedure library still need All sites. An administrator always works on all Sites.

What this person can do

Lower on the Manage page, What this person can do lists, section by section, what the person's saved access allows and which of their roles grants each permission. An extra permission shows as Individual permission. It reads the access as saved, so save first to see a change there. Sections your portal's plan doesn't include stay unavailable, whatever the roles grant.

To require an authenticator and help someone recover access, follow Two-step sign-in. The portal policy, an individual's enrollment and a password reset are separate controls.

Reset a password

People change their own password in My account, or use Forgot password? before signing in. This also works for the only administrator. An administrator can still select Send reset link under a person's Account access. The reset link expires after 24 hours; another can be sent after two minutes.

Remove a person

Select Delete user on the person's Manage page and confirm. It removes sign-in access and cannot be undone; the audit history is kept. To give access back, invite the person again.

You cannot delete or disable your own account. The last active administrator cannot be deleted, disabled or given another role until another active administrator exists.

Review the audit history

Settings > Audit history shows who did what and when: sign-ins and failed sign-ins, role and permission changes, alarm responses, rule changes and access to recorded video. It opens on the last 30 days. Filter by Action, From, Through, Person or Outcome. Enter times in the displayed local time zone, and select Record details for an entry's details. You set how long records are kept under Settings > Retention > Audit and alarm metadata retention (days).