Area Access Manager (Browser-based Client) User Guide

Transcription

1 Area Access Manager (Browser-based Client) User Guide PERPETUAL INNOVATION

2 Lenel OnGuard 2010 Area Access Manager (Browser-based Client) User Guide, product version 6.4 This guide is item number DOC-961, revision 1.012, April 2010 Copyright Lenel Systems International, Inc. Information in this document is subject to change without notice. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Lenel Systems International, Inc. Non-English versions of Lenel documents are offered as a service to our global audiences. We have attempted to provide an accurate translation of the text, but the official text is the English text, and any differences in the translation are not binding and have no legal effect. The software described in this document is furnished under a license agreement and may only be used in accordance with the terms of that agreement. Lenel and OnGuard are registered trademarks and BadgeDesigner, FormsDesigner, and MapDesigner are trademarks of Lenel Systems International, Inc. Windows, Windows Vista, Windows 2003, and Windows XP are trademarks and Microsoft is a registered trademark of Microsoft Corporation. Integral and FlashPoint are trademarks of Integral Technologies, Inc. Crystal Reports for Windows is a trademark of Crystal Computer Services, Inc. Oracle is a registered trademark of Oracle Corporation. Other product names mentioned in this User Guide may be trademarks or registered trademarks of their respective companies and are hereby acknowledged. Portions of this product were created using LEADTOOLS LEAD Technologies, Inc. ALL RIGHTS RESERVED. OnGuard includes ImageStream Graphic Filters. Copyright Inso Corporation. All rights reserved. ImageStream Graphic Filters and ImageStream are registered trademarks of Inso Corporation.

3 Table of Contents Table of Contents CHAPTER 1 Introduction Prerequisites Browser Settings Adobe Reader Licensing Permissions Services Configure the Configuration Download Service host Getting Started Web Address Server Location Log In CHAPTER 2 User Interface Area Access Manager User Interface CHAPTER 3 Access Levels Pre-Configuration Multiple Active Badge Access Level Assignment Activation Activating Multiple Badge Access Level Assignments Person Count Threshold Value Assigning Access Levels on Segmented Systems Reader Assignments to Cardholders Report on a Segmented System Configuring Access Levels Area Access Manager (Browser-based Client) User Guide 3

4 Table of Contents Assigning Access Levels to Cardholders and Visitors Remove Access Levels from Cardholders and Visitors Removing Access Levels from Cardholders and Visitors Change Activation and Deactivation Dates to Cardholder Access Levels Viewing Video Permissions Viewing Video CHAPTER 4 Reports Make Additional Reports Available in Area Access Manager through System Administration 19 Making Area Access Manager Reports Available Run a Report Running and Printing Reports Index Area Access Manager (Browser-based Client) User Guide

5 CHAPTER 1 Introduction Area Access Manager users can assign, modify, or remove access levels for active badges. This effectively grants or restricts a cardholder or visitor s access to readers that control specific areas. An Area Access Manager user has control over specific access levels that are assigned in System Administration. Area Access Manager can be used to: Assign temporary and/or standard access levels to a cardholder or visitor s active badge(s) Modify the activation and/or deactivation of an active badge by creating a temporary access level. A temporary access level is any access level that is assigned an activation and/or deactivation date. Bulk modify the access level activation and/or deactivation date of active badges Remove access level assignments from a cardholder or visitor s active badge(s) Preview or print reports View personal information for selected cardholders or visitors: Prerequisites The following contains required settings and installations that must be completed if the web Area Access Manager is to be used. Browser Settings Area Access Manager is currently supported with Internet Explorer. Certain browser controls must be enabled to display the functionality of Area Access Manager. ActiveX controls must be enabled. In Internet Explorer, add the Area Access Manager URL to the list of Trusted Sites on the Security tab of the Internet Options and set the Security level for this zone to Medium-low. The following options must be configured in the custom security settings: Item ActiveX controls and plug-ins > Automatic prompting for ActiveX controls Setting Enable Area Access Manager (Browser-based Client) User Guide 5

6 Introduction Item Downloads > File Download Miscellaneous > Access data sources across domains Setting Enable Prompt Note: For clients running Windows Server 2003, Play animations in web pages should also be enabled on the Advanced tab. To enhance Area Access Manager performance, bypass the proxy server for local addresses and add the web server address to the list of proxy server exceptions. Adobe Reader You must have Adobe Reader installed on the web client to be able to run reports. Adobe Reader can be found on the Supplemental disc. Licensing The browser based Area Access Manager is a licensed application. Normal OnGuard licensing procedures are required. Permissions Area Access Manager (Browser-based Client) enforces all OnGuard user permissions. Services The configuration download service (LnlConfigDownloadService.exe) is used to send updates to the controllers when changes are made to access level assignments using the Area Access Manager (Browser-based Client). This service will check the database once a minute (the default setting) to see if there are any new changes to process and it will then send down these changes to the hardware. This service needs to run if Area Access Manager (Browser-based Client) is being used. Only one instance of the configuration download service can exist in a system. Configure the Configuration Download Service host 1. Navigate to the System Options folder in System Administration. 2. Click [Modify] 3. Select a workstation in the Configuration Download Service host drop-down box or browser for one in the system. Getting Started To connect to Area Access Manager (Browser-based Client) over a network two pieces of information are needed: 6 Area Access Manager (Browser-based Client) User Guide

7 Getting Started 1. The location of the OnGuard server. 2. Login credentials for a Domain account with access to the OnGuard server. Additional steps are necessary to configure OnGuard for web application access. These steps can be found in the Installation Guide. Web Address The URL to access Area Access Manager consists of the server name or IP address and the location of the application on the server. The location of the application is different depending on the application used. There is not a central log in web site for all OnGuard web-based applications. To connect to Area Access Manager, type the following address into a browser, where <server-name> is the location of the OnGuard server: Server Location Area Access Manager (Browser-based Client) does not require the installation of the OnGuard software. You must have the server name or IP address to connect to the OnGuard server. Note: If SSL is configured the web address will begin with https. Log In Once the prerequisites have been met, the user may log in to Area Access Manager. In addition to providing OnGuard login credentials, the user must also provide the login credentials for a Domain account with access to the OnGuard server. Clients that do not have OnGuard installed will be prompted to install software the first time they view video. When prompted to install LnvrWebPlayerInstall.cab, click [Install]. Area Access Manager (Browser-based Client) User Guide 7

8 Introduction 8 Area Access Manager (Browser-based Client) User Guide

9 CHAPTER 2 User Interface You can use the Area Access Manager main window to do the following: Display cardholders or visitors assigned to a selected access level Display personal information about selected cardholders or visitors Allow cardholders and visitors to be assigned to access levels Allow cardholders and visitors to be removed from access levels Display all active badge IDs for cardholders or visitors. Area Access Manager (Browser-based Client) User Guide 9

10 User Interface Area Access Manager User Interface Area Access Manager (Browser-based Client) User Interface Form Element Preferences Help Log Off Access level Person type Description Opens the User Preferences window where you can select viewing options. These options include whether you show the filter bar in the UI, whether you show active badges in the listing window, and how many cameras you automatically view. Opens the online help for Area Access Manager. Logs you out of Area Access Manager. Lists the access levels that can be assigned and removed from a cardholder or visitor s active badges. Selecting a certain access level from this drop-down will filter the results in the listing window to show just those cardholders. Choose cardholder or visitor. Selecting either will filter the results in the listing window to show just those cardholders. 10 Area Access Manager (Browser-based Client) User Guide

11 Area Access Manager User Interface Area Access Manager (Browser-based Client) User Interface Form Element Filter by (Selected Person) View Assign Access Change Dates Remove Access Run Reports View Video Description Shown only if the Show filter bar is selected in the User Preferences window, which opens by clicking on Preferences on the Area Access Manager (Browser-based Client) user interface. Allows you to filter which cardholder s are shown in the listing window. The filter options including activation date, deactivation date, and other search types. When a cardholder is selected, click this to open a specific cardholder window that shows personal, badge, and access level information. Opens the Access Level Assignment Wizard, which allows you to assign access levels to cardholders. For more information refer to, See Assigning Access Levels to Cardholders and Visitors on page 15. With a cardholder selected, click this to change activation and deactivation dates. With a cardholder selected, click this to remove access levels from the cardholder. Opens the Reports window, which allows you to run reports. See Run a Report on page 20. Opens the video viewer window. you can choose how many cameras you view in this window by clicking on Preferences on the Area Access Manager (Browser-based Client) user interface. Area Access Manager (Browser-based Client) User Guide 11

12 User Interface 12 Area Access Manager (Browser-based Client) User Guide

13 CHAPTER 3 Access Levels What are access levels? An access level is one or more reader/timezone combinations used to control hardware access by one or more cardholders. Access levels can be assigned to active badges to define which readers a badge has access to and at which times. Types of access levels. There are two types of access levels: standard access levels and temporary access levels. The difference between the two is that temporary access levels have an activation and/ or deactivation date, and standard access levels do not. Pre-Configuration The following sections and procedures are optional pre-configuration steps that you may find useful depending on the type of system you are using. Multiple Active Badge Access Level Assignment Activation Many systems are configured to only allow each cardholder/visitor one active badge. Systems can also be configured to allow multiple active badges per cardholder/visitor. This is done in the Active badges per cardholder field on the General Cardholder Options form in System Administration or ID CredentialCenter (Administration > Cardholder Options). Activating Multiple Badge Access Level Assignments 1. In System Administration or ID CredentialCenter navigate to: Administration > Cardholder Options. 2. Set how many badges are allowed using the Active badges per cardholder field 3. The following step is optional: You may wish to use the View Active Badges option in Area Access Manager to assign any of a cardholder/visitor s active badges to a particular access level. By default, this option is not selected. a. In Area Access Manager, navigating to View > Active Badges. Area Access Manager (Browser-based Client) User Guide 13

14 Access Levels b. The listing window will display a Badge ID column. The listing window will list multiple entries for each cardholder/visitor, one for each active badge assigned to the cardholder/ visitor. c. By default, this option is not selected. Whether this option is selected or deselected is stored on a per user basis on each workstation in the registry. This means that if a user selects this option and either logs out of Area Access Manager or exits the application, the next time the user runs Area Access Manager, the setting will be restored. Person Count Threshold Value The Person Count Threshold value is a setting that determines whether records assigned to an access level are automatically loaded in the main window when logging in or when switching which access level is displayed using the Access level drop-down. This is useful for systems that have large numbers of cardholders and/or visitors assigned to access levels, as it can take awhile to load a lot of records. The default Person Count Threshold value is 5000; if less records than that are assigned to an access level, then the records will automatically be displayed. If 5000 or more records are assigned to an access level, then the records will not automatically be displayed. If you are logging in, then the Access level drop-down will be expanded, and you must select an access level to display. If you are already logged in and are switching which access level is displayed (using the Access level drop-down), then a warning message is displayed if the access level you selected has 5000 or more records. The Person Count Threshold is only used when you use the Access level drop-down. If you modify the records being displayed using some other method, such as applying filters from the Filter bar, assigning/removing access levels, or enabling/disabling viewing active badges, all records will be displayed. Although the default person count threshold value of 5000 works well for most systems, it is possible to change it to a higher or lower value should you need to. This is done by adding the following ACS.INI file setting: [AreaAccessManager] PersonCountThreshold=5000 This setting is not in the ACS.INI file by default. If you wish to use a value other than the default value of 5000, you must add this setting to the ACS.INI file and set it to the value you wish to use. If you add or change this ACS.INI setting, you must shut down and restart Area Access Manager in order for the changes to be applied. Assigning Access Levels on Segmented Systems Access levels that are configured as being assignable by users that have access to other segments will show up in the Access level drop-down list in the main user interface as well as in the Access Level Assignment Wizard when assigning access levels. This allows users in different segments to assign access levels from a common segment, but does not allow them to see each other s cardholders. For this to occur, the following conditions must be met: 14 Area Access Manager (Browser-based Client) User Guide

15 Configuring Access Levels The system must be segmented and have the Allow access levels to be configured as assignable by users in other segments feature enabled. For more information, refer to the Segmentation appendix in the System Administration User Guide. The access levels must be configured to be assignable by users that have access to other segments. This is done on the Access Level Additional Segments form in the Access Levels folder in System Administration. The access levels must be selected as access levels to manage from the Area Access Managers Levels sub-tab on the Users form in the Users folder in System Administration. Also, when cardholders are segmented and an access level is assigned to a cardholder that does not currently belong to the cardholder s primary segment or additional segments, the segment assignment is made behind-the-scenes so that the proper access level assignment can be made. Reader Assignments to Cardholders Report on a Segmented System A report that you may wish to make available in Area Access Manager is the Reader Assignments to Cardholders report. This report enables you to print a list of all cardholders that have access to a particular reader. By default, this report is not available in Area Access Manager. To make it available in Area Access Manager please refer to, Make Additional Reports Available in Area Access Manager through System Administration on page 19 If any of the access levels that are configured as assignable by users with access to other segments are available for an Area Access Manager user to assign, in order for the user to see which cardholders are assigned to the readers that make up these access levels in the Reader Assignments to Cardholders report, the user must: have segment access to the segment that contains the levels that are configured as assignable by users with access to other segments AND be able to manage one of the access levels that belongs to this segment from Area Access Manager. For example, a common segment (Common Segment 1) may be defined with an access level (Level 1) that controls two readers. Now this access level (Level 1) is configured so that it can be assigned by users with access to another segment (Segment 2). If a user is defined that only has segment access to Segment 2, this user would then have Level 1 available to manage through Area Access Manager. When logging into Area Access Manager as this user and running the Reader Assignments to Cardholders report, the user would not be able to see which cardholders are assigned to the readers that make up Level 1. The user would need to have segment access to Common Segment 1. Configuring Access Levels You can assign one or many cardholders/visitors and any of their active badges to one or many access levels using the Access Level Assignment Wizard. Assigning Access Levels to Cardholders and Visitors 1. On the Area Access Manager main window, click [Assign Access]. 2. The Access Level Assignment Wizard begins, specify the search criteria by typing a full or partial entry in the field(s) on which you wish to search. You can use a quick search or an advanced search to find cardholders. On the Quick Search tab you can enter any string of letters or numbers to find cardholders. For drop-down list fields on the Advanced Search tab, you can select specific field values to search. Here are a few examples: Area Access Manager (Browser-based Client) User Guide 15

16 Access Levels Type Lake in the Last Name field to find all records of personnel who have the last name Lake. Type M in the Last Name field to find all records of personnel whose last name begins with the letter M. Enter no search criteria to display all cardholder/visitor records. On systems with a large number of records, this may take a long time because all records that you have permission to view are returned. If you select no search criteria, a warning message is displayed, which informs you of this. Click [Yes] to proceed, or [No] to cancel. 3. Click [Next]. 4. Depending on what you entered for the search criteria, the following may occur: a. If one or more cardholder/visitor match the search criteria you entered, they are listed in the wizard. b. If no cardholder/visitor matches the search criteria you entered, a message is displayed that says No results. If this happens, click [Back] and enter new search criteria. c. If you entered no search criteria, all cardholders/visitors are displayed in the wizard. (On systems with many cardholders/visitors, be sure to select a search criteria - searching through thousands of records could take a lot of time!) 5. Optional - If you need to view more information about one or more records, select the record(s) and then click [View]. The specific cardholder window opens and allows you to view specifics about the cardholder. 6. If assigning access levels to cardholders, select the cardholder(s) that you want to assign access levels to. Click [Next]. 7. Select the access levels you want to assign to the cardholder/visitor(s). You must choose one or more access levels to assign. The currently viewed access level (on the Area Access Manager main window) is selected by default. a. If you wish to assign an activation and deactivation date for an access level that is listed, select the access level and then click the Activation/Deactivation Date check box. b. Click the calender icon to open the calender window, which allows you to select the date. Also, you may enter the date manually c. Click [Set Date/Time]. 8. Click [Next]. 9. The Summary window is displayed. If you agree with the summary of the access level assignments that you are about to made, click [Finish]. 10. If the access level(s) are successfully assigned, the access levels are assigned to the selected cardholders/visitors active badges and the badges are then downloaded to the appropriate panels. 11. If an access level fails to be assigned, then follow the on screen instructions or contact your system administrator. Remove Access Levels from Cardholders and Visitors You can remove one or many cardholders or visitors from an access level easily using Area Access Manager. Removing Access Levels from Cardholders and Visitors 1. Select the cardholder(s) that you wish to remove access levels from. 2. Select the access level in the Access level drop-down that you wish to remove from the selected cardholder. 16 Area Access Manager (Browser-based Client) User Guide

17 Viewing Video 3. On the Area Access Manager main window, click [Remove Access]. 4. A warning message will be displayed; click [Yes] to proceed with the removal. The currently viewed access level will then be removed from the selected cardholder/visitors active badges and the badges will be downloaded to the appropriate panels. 5. The access level is removed. Note: A cardholder/visitor may be listed more than once if that cardholder/visitor has multiple active badges. Select the active badge/cardholder or active badge/visitor combination that you would like the access level to be removed from. Change Activation and Deactivation Dates to Cardholder Access Levels When you assign an activation and/or deactivation date to an access level, you are really creating a temporary access level. The activation and/or deactivation date that you assign only applies to the cardholder(s) or active badge ID(s) that you select, not the entire access level. To change activation and deactivation dates: Changing Activation and Deactivation Dates 1. Select one or more cardholders and click [Change Dates]. 2. The Change Dates window opens. a. Click the Activation/Deactivation Date check boxes. b. Click the calender icon to open the calender window, which allows you to select the date. You may also enter the date manually c. Click [OK]. 3. The Activate and/or Deactivate section of the listing window update to the new dates. Viewing Video The View Video feature allows users managing an access level to view associated live video. Multiple video windows from different cameras can be displayed at the same time. The number of video windows displayed automatically can be configured or the user may be allowed to select which cameras they wish to view video for. Permissions There are two permissions associated with viewing video in Area Access Manager. View Video To view live video in Area Access Manager, users must have the following permission configured in System Administration: Monitor Permission Groups > Monitor > View > Live Video. Area Access Manager (Browser-based Client) User Guide 17

18 Access Levels Automatic Video View Count To modify the Automatic Video View Count value, users must have the following permission configured in System Administration: System Permission Groups > Software Options > System Configuration > Modify. Viewing Video The View Video feature can be configured to allow the user to choose which cameras to view or to automatically launch cameras when the total number available for the currently selected access level is less than a specified number. To view video for the currently selected access level, click [View Video]. Selecting Cameras If the number of cameras assigned to an access level is greater than the Automatic Video View Count, the user will be prompted to select which cameras to view. The reader and panel names are displayed for the selected camera. Automatic Video View Count View Video can be configured to automatically launch video for fewer than a specified number of cameras. For example, if an access level has three cameras available and the Automatic Video View Count value is 3 (or greater), live video will be displayed for all three cameras without prompting the user to choose cameras from a list. This value is configured by setting the Maximum number of cameras to automatically view field in the User Preferences dialog. To always prompt users to choose cameras from a list, set the Maximum number of cameras to automatically view field to a value of Area Access Manager (Browser-based Client) User Guide

19 CHAPTER 4 Reports Reports can be printed or previewed in Area Access Manager by any Area Access Manager user - no additional permissions are required. The reports that are available in Area Access Manager can be configured via a report type in System Administration. To be able to print or preview a report in Area Access Manager, that report must be assigned the Area Access Manager report type in System Administration. Note: Additional steps are necessary to configure the Web Application Server for report generation in browser-based Area Access Manager. Refer to the Installation Guide for more information. Make Additional Reports Available in Area Access Manager through System Administration Running reports require that you install Adobe Reader on the web client. Adobe Reader can be found on the Supplemental disc. The reports available in Area Access Manager are configured in System Administration. By default, there are two reports available: Access Level Assignments to Cardholders and Access Level Assignments to Cardholders By Segment. These two reports have the Area Access Manager type assigned to them. Only reports with the Area Access Manager type assigned are available Making Area Access Manager Reports Available 1. From the Administration menu in System Administration, select Reports. 2. In the listing window, select the report that you want to become available in Area Access Manager. 3. Click [Modify]. 4. In the Type(s) field, select the Area Access Manager check box. 5. Click [OK]. To remove a report from Area Access Manager, do the following: Area Access Manager (Browser-based Client) User Guide 19

20 Reports 1. From the Administration menu in System Administration, select Reports. 2. In the listing window, select the report you wish to remove from Area Access Manager. 3. Click [Modify]. 4. In the Type(s) field, deselect the Area Access Manager check box. 5. Click [OK]. Run a Report Running and Printing Reports 1. Click, [Run Reports]. 2. The Reports window opens. Select the report you wish to run. 3. Preview or print the report. If you wish to print the report, click [Print]. The Print Report Options window opens. If you wish to preview the report, click [Preview]. The Report Print Options window opens. Note: If the Linkage Server is running under a local system account it may not have permission to access a network printer (depending on its configuration). If this is the case you must select a local or default network printer. Contact your System Administrator to determine what account the Linkage Server is running under and the printers it can access. 20 Area Access Manager (Browser-based Client) User Guide

21 Index A Access Levels activation dates assigning configuring deactivation dates removing Access levels assigning configuring definition multiple active badge person count threshold value removing segmented systems types Area Access Manager overview... 5 report type server location... 7 user interface overview... 9 B Browser Settings... 5 L Licensing... 6 Log In... 7 Area Access Manager... 5 Area Access Manager user interface... 9 P Permissions... 6 Person Count Threshold Prerequisites... 5 R Reports Area Access Manager type S Segmented Systems access levels reader assignments Services... 6 T Types of access levels U URL... 7 User Interface... 9 W Web Address... 7 M Multiple Active Badge Access Level O Overview VideoViewer (Browser-based Client) 21

22 Lenel Systems International, Inc Pittsford-Victor Road Pittsford, New York USA Tel Fax