area access manager

7/24/2019 Area Access Manager

1/114

PERPETUAL INNOVATION

Area Access Manager

User Guide


2/114

LenelOnGuard2010Area Access Manager User Guide, product version 6.4

This guide is part 2 of a 2-document suite, item number DOC-800, revision 1.015, April

2010

Copyright 1995-2010 Lenel Systems International, Inc. Information in this document is subject

to change without notice. No part of this document may be reproduced or transmitted in any formor by any means, electronic or mechanical, for any purpose, without the express written

permission of Lenel Systems International, Inc.

Non-English versions of Lenel documents are offered as a service to our global audiences. We

have attempted to provide an accurate translation of the text, but the official text is the English

text, and any differences in the translation are not binding and have no legal effect.

The software described in this document is furnished under a license agreement and may only be

used in accordance with the terms of that agreement. Lenel and OnGuard are registered trademarks

of Lenel Systems International, Inc.

Microsoft, Windows, Windows Server, and Windows Vista are either registered trademarks or

trademarks of Microsoft Corporation in the United States and/or other countries. Integral and

FlashPoint are trademarks of Integral Technologies, Inc. Crystal Reports for Windows is a

trademark of Crystal Computer Services, Inc. Oracle is a registered trademark of OracleCorporation. Other product names mentioned in this User Guide may be trademarks or registered

trademarks of their respective companies and are hereby acknowledged.

Portions of this product were created using LEADTOOLS 1991-2010 LEAD Technologies, Inc.

ALL RIGHTS RESERVED.

OnGuard includes ImageStream Graphic Filters. Copyright 1991-2010 Inso Corporation. All

rights reserved. ImageStream Graphic Filters and ImageStream are registered trademarks of Inso

Corporation.


3/114

Area Access Manager User Guide

revision 1 3

Table of Contents

Chapter 1: Introduct ion ...............................................................9

Conventions Used in this Documentation .......................................................9

Getting Started ..............................................................................................10

Licensing Requirements .................................................................................................. 10

Permissions ..................................................................................................................... 10

Passwords ....................................................................................................................... 11

Enable/Disable Strong Password Enforcement .............................................................. 12

Change User Passwords ................................................................................................ 13

Error Messages ............................................................................................................... 13

Accounts ......................................................................................................................... 14

Log In .............................................................................................................................. 15

Single Sign-On ..............................................................................................16

Directory Accounts .......................................................................................................... 16

Automatic and Manual Single Sign-On ........................................................................... 17

Configure Single Sign-On ............................................................................................... 17

Log In Using Automatic Single Sign-On .......................................................................... 18

Log In Using Manual Single Sign-On .............................................................................. 19

Troubleshoot Logging In ..............................................................................19

Assigning Directory and Internal Accounts to the User .................................20

Access Level Displayed Upon Login .............................................................20

Log Out of the Application .............................................................................21

Exit the Application ........................................................................................ 21


4/114

Table of Contents

4 revision 1

Chapter 2: Main Window ...........................................................23

Customize the Select People, Summary, and Area Access Manager MainWindows ..................................................................................................... 30

Menus ...........................................................................................................31

Main Window Right-click Menu .....................................................................34

Chapter 3: Personal Information Window ...............................37

Personal Information Window - Common Elements .....................................37

Personal Information Window - Cardholder Form .........................................40

Personal Information Window - Visitor Form .................................................42

Personal Information Window - Badge Form ................................................44

Personal Information Window - Access Levels Form .................................... 46

View Personal Information ............................................................................47

Chapter 4: Access Levels .........................................................49

Multiple Active Badge Access Level Assignment .......................................... 50

Access Level Assignment on a Segmented System ..................................... 50

Reader Assignments to Cardholders Report on a Segmented System ........51

View Access Level Assignments ...................................................................51

Filter Records Displayed in the Main Window ...............................................52

Remove Access Levels from Cardholders or Visitors ...................................53

Assign Access Levels to Cardholders or Visitors ..........................................53

Assign Activation and Deactivation Dates to Access Levels .........................59

Chapter 5: View Video ...............................................................63

Permissions ................................................................................................... 63


5/114


revision 1 5

View Video ...................................................................................................................... 63

Automatic Video View Count ........................................................................................... 63

Viewing Video ...............................................................................................63

Selecting Cameras .......................................................................................................... 64

Automatic Video View Count ........................................................................................... 64

View Video Window ........................................................................................................ 64

Chapter 6: Reports ....................................................................65

Reports Window ............................................................................................66

Configure Which Reports are Available in Area Access Manager ................ 66

Run a Report in Area Access Manager .........................................................67

Chapter 7: Print Report Options Window ................................69

Print Report Options Window ........................................................................ 70

Print a Report .................................................................................................................. 71

Chapter 8: Report Print Preview Window ................................73

Report Print Preview Window ....................................................................... 74

Report Print Preview Window Right-click Options ........................................76

Report Print Preview Window Procedures ....................................................76

Preview and Print a Report ............................................................................................. 76

Search a Report for Specific Information ........................................................................ 78

Appendix ...........................................................................79

Appendix A: Access Level Assignment Wizard .....................81

Using Listing Windows ..................................................................................81

Find People Window - Cardholder Form .......................................................82


6/114

Table of Contents

6 revision 1

Find People Window - Cardholder Form Overview ......................................................... 82

Find People Window - Visitor Form ...............................................................85

Find People Window - Visitor Form Overview ................................................................. 85

Find People Window - Access Levels Form ..................................................88

Find People Window - Access Levels Form Overview .................................................... 88

Select People Window ..................................................................................90

Select People Window Overview .................................................................................... 90

Select Access Levels Window ......................................................................92

Select Access Levels Window Overview ........................................................................ 92

Access Level Assignment Wizard .................................................................93

Summary Window .........................................................................................94

Summary Window Overview ........................................................................................... 94

Appendix B: Bulk Access Level Act ion Results Window ......97

Bulk Access Level Action Results Window Overview ...................................97

Appendix C: Access Level Act ivation Dates Window ............99

Access Level Activation Dates Window Overview ........................................99

Appendix D: Person Count Threshold Value ........................103

Appendix E: Troubleshooting ................................................105

Login-related Problems ...............................................................................105

License Not Installed ..................................................................................................... 105

Incorrect Username/Password ...................................................................................... 105

Login Access Disabled .................................................................................................. 105

No Permission for Area Access Manager ................................................................. 106

No Permission to View Cardholders and Visitors .......................................................... 106


7/114


revision 1 7

No Access Levels to Manage ........................................................................................ 106

No Permission to View Fields in Search Results Lists .................................................. 107

No Permission to View Fields in Search Results Lists and Visitors .............................. 109

No Permission to View Fields in Search Results Lists and Cardholders ...................... 109

Report-related Problems .............................................................................110

No Reports Available in Area Access Manager ............................................................ 110

Incorrect Reports Available in Area Access Manager After Upgrade ........................... 110

Index ...............................................................................................111


8/114

Table of Contents

8 revision 1


9/114


revision 1 9

Chapter 1: Introduction

Area Access Manager users can assign, modify, or remove access levels for

active badges. This effectively grants or restricts a cardholder or visitors access

to readers that control specific areas. An Area Access Manager user has control

over specific access levels that are assigned in System Administration. AreaAccess Manager can be used to:

1. Assign temporary and/or standard access levels to a cardholder or visitors

active badge(s)

2. Modify the activation and/or deactivation of an active badge by creating a

temporary access level. A temporary access level is any access level that is

assigned an activation and/or deactivation date.

3. Bulk modify the access level activation and/or deactivation date of active

badges

4. Remove access level assignments from a cardholder or visitors active

badge(s)

5. Preview or print reports

6. View personal information for selected cardholders or visitors

Conventions Used in this Documentation

The text in this manual is formatted to make it easy for you to identify what is

being described.

Where a term is defined, the word is represented in italics.

Field names, menus, and menu choices are shown in bold.

Keyboard keys are represented in angle brackets. For example: ,

.

Keyboard key combinations are written in two ways:

+ means hold down the first key and press the second

, means press the first key, then press the second

Window buttons on the screen are represented in square brackets; for

example: [OK], [Cancel].


10/114

1: Introduction

10 revision 1

Getting Started

Licensing Requirements

To use Area Access Manager, you must have purchased the Area Access

Manager. In the Access Controlsection of your OnGuardlicense, the followingwill be listed:

Area Access Manager Application: In Use- the number of concurrent Area

Access Manager licenses being used

Area Access Manager Application: Max- the number of concurrent Area

Access Manager licenses you have purchased

For more information, refer to Installing Your OnGuard License in the

Installation Guide.

PermissionsPermissions are set in System Administration or ID CredentialCenter. In order to

log into Area Access Manager, a user must have the following permissions:

1. The user must have permission to use the Area Access Manager application.

2. The user must have one or more access levels to manage.

3. The user must have permission to view access level assignments.

Note: If the user has permission to view access level assignments but not modify

them, then the user can log into Area Access Manager, but cannot assign,

remove, or modify access level activation dates.

4. The user must have permission to view either cardholders OR visitors. The

user must have permission to view at least one of these.

5. The user must have permission to view at least one of the cardholder search

results list fields OR at least one of the visitor search results list fields.

The following table describes these permissions:

Permission How to set the permission

Use Area Access

Manager

Select the Area Access Managercheckbox on the Administration> Users> System

Permission Groups form > Software Options sub-tab.

At least one access

level to manage

The access levels that can be managed by a user through Area Access Manager are configured

on the Area Access Manager Levels form in the Users folder in System Administration. (To

display this form in System Administration, from the Administrationmenu, select Users,

click on the Userstab, then click on the Area Access Manager Levels sub-tab.

View access level

assignments

Select the Access level assignmentscheckbox on the Administration> Users> Cardholder

Permission Groups form > Badge sub-tab.


11/114


revision 1 11

In addition to the above:

If the user can view cardholders but cannot view at least one cardholder

search result list field and the user cannot view visitors, the user will not be

allowed to log into the application.

If the user can view visitors but cannot view at least one visitor search result

list field and the user cannot view cardholders, the user will not be allowed

to log into the application.

The system-wide report permissions are not enforced because Area Access

Manager only contains reports that are specific to data that is available within

Area Access Manager. This means that any Area Access Manager user can runreports in Area Access Manager.

Passwords

OnGuardincludes strong password enforcement, which checks the users

password against password standards. This functionality is designed to enhance

password security if single sign-on is not used. If single sign-on is used

Modify access

level assignments

Select the Access level assignmentsand Modifycheckboxes on the Administration> Users

> Cardholder Permission Groups form > Badge sub-tab.

View Cardholders Select the Cardholdercheckbox on the Administration> Users> Cardholder Permission

Groups form > Cardholder sub-tab.

View permission

for at least one of

the cardholder

fields in the

cardholder search

results list

To view the cardholder search results list, select Administration> Cardholder Options>

Cardholder Search Results Lists form.

To view the permissions for the fields in the cardholder search results list, select

Administration> Users> Field/Page Permission Groups form. You should add a permission

group for Area Access Manager users with the necessary cardholder permissions set to Yes.

(For more information, refer to Add a Field/Viewing Permission Group in the System

Administration User Guide.)

For example, if Last Nameis listed in the Selected Fields listing window on the Cardholder

Search Results Lists form, the View permission for the CardholderTable/Last NameField

entry on the Field/Page Permission Groups form should be set to Yes.

View Visitors Select the Visitorcheckbox on the Administration> Users> Cardholder Permission Groups

form > Cardholder sub-tab.

View permission

for at least one of

the visitor fields in

the visitor search

results list

To view the visitor search results list, select Administration> Cardholder Options> Visitor

Search Results Lists form.

To view the permissions for the fields in the visitor search results list, select Administration>

Users> Field/Page Permission Groups form. You should add a permission group for Area

Access Manager users with the necessary visitor permissions set to Yes. (For more

information, refer to Add a Field/Viewing Permission Group in the System Administration

User Guide.)

For example, if Organizationis listed in the Selected Fields listing window on the Visitor

Search Results Lists form, the View permission for the User-Defined VisitorTable/Visitor

OrganizationField entry on the Field/Page Permission Groups form should be set to Yes.

Permission How to set the permission


12/114

1: Introduction

12 revision 1

(automatic or manual), OnGuard does not enforce password standards. For more

information on single sign-on, refer to Single Sign-Onon page 16.

The systems strong password enforcement also checks the Lenel database users

password when logging into applications. Database user passwords apply only to

Oracle and SQL databases. For information on changing your database password,

refer to the Accounts and Passwords chapter in the Installation Guide.

Password Standards

When creating a strong password keep the following guidelines in mind:

Passwords cannot be blank.

Passwords cannot be the same as the user name (e.g. SA, SA).

Passwords cannot be Lenel keywords.

Although not required, your password should contain numbers, letters, and

symbols. Spaces are also acceptable. (e.g. August 18, 2002).

OnGuard user passwords are notcase-sensitive. Database passwords conform to the rules of the specific database being used;

passwords in SQL Server and Oracle 11g are case sensitive. Passwords in

Oracle 10g and earlier are case-insensitive.

The maximum value for a strong password is 127 characters. The minimum

value is 1.

Notes: For Oracle databases the following account username and passwords are not

allowed to be used together:

System and Manager

Internal and Oracle

Sys and Change_On_Install

Enable/Disable Strong Password Enforcement

Strong password enforcement is enabled/disabled in System Administration or

ID CredentialCenter. When you install OnGuard, by default strong password

enforcement is enabled. When you upgrade, by default strong password

enforcement is disabled. To manually enable or disable strong password

enforcement:

1. Select System Optionsfrom the Administration menu in SystemAdministration or ID CredentialCenter.

2. Select the General System Options tab.

3. Click [Modify].

4. Select or deselect the Enforce strong passwordscheckbox.


13/114


revision 1 13

Note: If you disable the option to enforce strong passwords, you will continue to

receive a message stating your password is weak every time you log into an

application until you change your OnGuard password to meet the password

standards.

5. Click [OK].

Change User Passwords

User passwords are checked every time a user logs into any application. After a

user logs into an application he/she can change his/her user password.

1. From the Applicationmenu select Change Password.

2. The Change Password window displays. Enter your old password and new

password in the appropriate fields. Refer to the Password Standardson page

12for guidelines in choosing a secure password.

3. A message confirms that you have successfully changed your password.

4. Click [OK].

Note: If you get a weak password message the next time you log into the

application, carefully read the message. It may be telling you that your

database password is weak and not your user password. To change your

database password, refer to the Accounts and Passwords chapter in the

Installation Guide.

Error MessagesRead weak password messages/warnings carefully to avoid confusion about

whether your user password or database password is weak.

If you have a weak database password you will receive a warning every time you

log into any application, until you change your database password. Although it is

not recommended, you can acknowledge the warning and continue working in

the application. This table describes the password-related error messages that

may be generated and which password you need to correct.

To correct the database password, refer to the Accounts and Passwords

chapter in the Installation Guide.

To correct the user password, select a password that meets the standardsspecified in Password Standardson page 12.

Warning message Password

to correct

Database password violations: Your password is a keyword that is not

allowed. It is highly recommended that you change your password to

meet our minimum password standards.

Database


14/114

1: Introduction

14 revision 1

Accounts

Anyone who wishes to use OnGuard applications must enter a user name and

password in order to access the software. The System Administrator should

create a unique account for each user of the applications. The System

Administrator can also, for each user, create a list ofpermissions, which specifies

precisely which screens, fields, and buttons the user can access.

During initial installation of the application, default accounts are created. These

include:

These are provided as samples. You may change the passwords and use the

accounts, or remove them. The exception to this is the system account,SA. By

definition this account has permission to do anything in the system. A user with

system access has unlimited access to the application. You cannot delete orchange the system account except to modify the password, which you are

strongly encouraged to do as soon as possible to discourage unauthorized use.

The first time you log into OnGuard to configure the application, you should log

in as SA and your password should be SA.

Your password cannot be blank. Please enter a password. User

User password violations: Passwords cannot be the same as the user

name.

User

Your password is a keyword that is not allowed. User

Warning message Password

to correct

User name Password Type

sa sa system account

admin sample

user sample

badge sample


15/114


revision 1 15

Log In

This procedure describes how to log in without using single sign-on. For a

description of single sign-on, refer to Single Sign-Onon page 16. To log in using

single sign-on, refer to Configure Single Sign-Onon page 17.

1. Click the Start button, then select Programs> OnGuard 2010> Area

Access Manager.

2. Your system may be configured to prompt you to select a database to log

into. If it is not, proceed to the next step. If it is:

a. In the Databasedrop-down, all ODBC system databases currently

defined on your computer are listed. Select the database that you wish to

use for your application.

b. Click [OK].

3. The Log On window displays.

a. In theUser namefield, type the user name assigned to you. When

logging in for the first time, your user name is SA.

b. In the Passwordfield, type the password assigned to you. Whenlogging in for the first time, your password is SA. Note that the

characters you type do not appear in the field. Instead, for each character

you type, an * displays. This is intended to protect against

unauthorized access in the event that someone else can see the screen

while you type.

Important: After logging in for the first time, you are strongly encouraged to modify the

password for the system account as soon as possible to discourage

unauthorized use.

c. In the Directoryfield, select the directory that you wish to log into. Foruser accounts not using single sign-on, the default is .

d. Select the Remember user name and directory checkbox if you want

the values you just entered in theUser name and Directoryfields to

automatically be selected the next time that you log in.

e. Click [OK].

4. Your system may be configured to prompt you to confirm that you are

authorized to use the application. To accept the terms of the authorization

warning click [Yes].

5. If segmentation is not enabled, skip this step. If segmentation is enabled:

a. The Select Segment window opens. Select the segment you wish to loginto.

b. Click [OK].


16/114

1: Introduction

16 revision 1

Single Sign-On

Single sign-on simply means logging into OnGuard with the same user name and

password that you use to log into Windows or logging into OnGuard using an

LDAP user name and password for authentication.LDAP(Lightweight Directory

Access Protocol) is a software protocol that enables you to locate businesses,

people, files, and devices without knowing the domain name (network address).

Single sign-on allows scripts using the DataConduIT API to authenticate. These

scripts will be run under a Windows account. The account that is making the call

to the API can be obtained easily this way, and the script can be restricted to

those actions that the user is permitted to perform (using standard OnGuard

permissions).

Note: The use of the explicit username and password for directory authentication

to Windows is strongly discouraged. It is recommended that you do not store

Windows passwords in the OnGuard system, since OnGuard uses reversible

encryption and Windows does not. If explicit authentication is required, you

should use an account that has view only permission to the directory inquestion.

It is possible to assign both an internal account and one or more directory

accounts to a single user. Assigning both types of accounts increases the

flexibility of the system during the authentication process. If the directory service

is down or cannot be found from the workstation where the user is logging on,

that user can instead use the internal account. Using both types of accounts

means that you need to manage the internal account user names and passwords in

addition to managing the directory accounts.

Important: Allowing a user to log on in multiple ways increases the probability that the

user's access to the system could be compromised. It is recommended that

you standardize on either internal or directory accounts, but not both.

There are cases where assigning both an internal account and a directory account

to a user may make sense. In a system where directory accounts are

predominantly used, you may also assign an internal account to a user who needs

to access the system from locations where the directory service is unavailable. If

internal accounts are predominantly used, you may want to assign a directory

account to a user so that the user does not need to enter in a password to log on.

Directory Accounts

To log into OnGuard using single sign-on, a user name, password, and directory

are required. A directoryis a database of network resources, such as printers,

software applications, databases, and users. The following directories are

supported by OnGuard: Microsoft Active Directory, Microsoft Windows NT 4

Domain, Microsoft Windows Local Accounts, and LDAP.


17/114


revision 1 17

Automatic and Manual Single Sign-On

When a user account is configured for single sign-on, the user can log into

OnGuard automatically or manually.

For example, with automatic single sign-on, users simply start OnGuard and they

are automatically logged in under their Windows account and directory.

With manual single sign-on, users must manually enter their Windows or LDAP

account information (user name and password). Users also have the option of

selecting a different configured directory.

If single sign-on is not used, users manually enter a user name and a password

that is different from their Windows or LDAP password. The directory is hard-

coded to refer to the internal OnGuard user directory.

Notes: Manualsingle sign-on can be used with the following directories: Microsoft

Active Directory, Microsoft Windows NT 4 Domain, and LDAP.

Automatic single sign-on can be used with every directory supported byOnGuard exceptLDAP because it doesnt provide all the account

information required.

Configure Single Sign-On

By default, user accounts do notuse sign-on. To configure single sign-on the

System Administrator must add a directory and link a user account to the

directory.


18/114

1: Introduction

18 revision 1

Notes: For more information, refer to Add a Directory in the Directories folder

chapter of the System Administration or ID CredentialCenter User Guide.

For more information, refer to Link a User Account to a Directory

Account in the Users folder chapter of the System Administration or ID

CredentialCenter User Guide.

Log In Using Automatic Single Sign-On

Automatic single sign-on is supported with Windows domain accounts.


Access Manager.


into. If it is not, proceed to step 3. If it is:

a. In theDatabasedrop-down, all ODBC system databases currently



b. Click [OK].

3. If your Windows account is linked to a user, a message will be displayed that

says, Attempting to automatically log you on using your Windows account.

To bypass this, hold down SHIFT. To automatically be logged in, do

nothing.

4. Your system may be configured to prompt you to confirm that you are

authorized to use the application. To accept the terms of the authorization

warning, click [Yes].


a. The Select Segment window opens. Select the segment you wish to log

into.

b. Click [OK].


19/114


revision 1 19

Log In Using Manual Single Sign-On

Both users who want to log into OnGuard using an LDAP user name and

password for authentication and users who want to log in using a Windows

domain account can do so using manual single sign-on.


Access Manager.


into. If it is not, proceed to step 3. If it is:

a. In theDatabasedrop-down, all ODBC system databases currently



b. Click [OK].

3. If your Windows account is linked to a user, a message will be displayed that

says, Attempting to automatically log you on using your Windows account.

To bypass this, hold down SHIFT.

To manually login or to login using a different user name and password, hold

down the key. The Log On window opens.

a. In the Directory field, select the directory that you wish to log into. The

default is .

b. In the User namefield, type the Windows user name assigned to you.

Do not enter the domain\user name just enter your user name.

c. In the Passwordfield, type the Windows password assigned to you.

d. Select the Remember user name and directory checkbox if you want

the values you just entered in the User name and Directoryfields to

automatically be selected the next time that you log in.

e. Click [OK].

4. Your system may be configured to prompt you to confirm that you areauthorized to use the application. To accept the terms of the authorization

warning, click [Yes].


a. The Select Segment window opens. Select the segment you wish to log

into.

b. Click [OK].

Troubleshoot Logging InIf you attempted to log in and were unable to do so, make sure that the following

conditions have been met:

You entered a correct user name/password and specified the correct

directory.

If your system is configured to display an authorization warning, you

accepted the terms.


20/114

1: Introduction

20 revision 1

A valid license is installed.

You have permission to use the application.

If you attempted to log in and were unable to do so, make sure the following

conditions have been met:

You entered the correct user name and password for the selected

directory of a user with permission to use the application.

If the system is configured to display an authorization warning, then you

accepted the terms.

Verify your acs.ini file has the correct LicenseServer Host and Port

settings. The LS License Server service must be started on the specified

Host.

Log into the License Administration application to verify a valid license

is installed.

Software based licenses must be activated.

USB and Parallel licenses must have License Key Drivers installed.

If using single sign-on, ensure the pc user you are logged in as is linked

to an internal OnGuard user through an operational directory.

Assigning Directory and Internal Accounts to the User

It is possible to assign both an internal account and one or more directory

accounts to a single user. Assigning both types of accounts increases the

flexibility of the system during the authentication process. Meaning, if the

directory service is down or cannot be found from the workstation where the user

is logging on, then the user can use the internal account instead.

However, using both types of accounts means that you need to manage the

internal account user names and passwords in addition to managing the directoryaccounts. Allowing a user to log on in multiple ways increases the probability

that the user's access could be compromised. For that reason, it is recommended

that you standardize on either internal or directory accounts, but not both.

There are cases where assigning both an internal account and a directory account

to a user may make sense. In a system where directory accounts are

predominantly used, you may also assign an internal account to a user who needs

to access the system from locations where the directory service is unavailable. If

internal accounts are predominantly used, you may want to assign a directory

account to a user for that user's convenience, so that the user does not need to

enter in a password to log on.

Access Level Displayed Upon Login

After you log into Area Access Manager, records associated with the access

levels available in the Access level drop-down will be used to display records in

the main window.


21/114


revision 1 21

If there is only one access level to work with, that access level will always be

selected by default regardless of how many people are assigned to that

access level.

If you have multiple access levels to work with and the first access level in

the Access level drop-down will return less than 5000 people, then the first

access level will be selected by default.

If the first access level would return 5000 or more people, no access level

will be loaded by default. Instead, the Access level listing window will be

expanded, and you can choose which access level to load.

Note: Although the default Person Count Threshold value of 5000 works well for

most systems, it is possible to change it. For more information, refer to

Appendix D: Person Count Threshold Valueon page 103.

Log Out of the Application

1. Select the Log Offchoice from the Applicationmenu.

2. All open data entry forms will be closed. The main window will open again

as it did before you logged in and most of the toolbar and menu options will

be dimmed. To access most of the applications features you must then log in

again.

Exit the Application

The main window can be closed using either of the following methods:

Select Exitfrom the Applicationmenu.

Double-click on the Control-menu box, an icon in the windows upper left

corner.

Right-click on the Control-menu box and select Close.

Press [Alt] + [F4].


22/114

1: Introduction

22 revision 1


23/114


revision 1 23

Chapter 2: Main Window

You can use the Area Access Manager main window to do the following:

Display cardholders or visitors assigned to a selected access level

Display personal information about selected cardholders or visitors

Allow cardholders and visitors to be assigned to access levels

Allow cardholders and visitors to be removed from access levels

Display all active badge IDs for cardholders or visitors

The Area Access Manager main window can display two different types of

records: cardholder and visitor. Only one type of record can be displayed at a

time. When the View> Person Type> Cardholdersoption is selected, the Area

Access Manager main window displays cardholders, as shown:

When the View> Person Type> Visitorsoption is selected, the Area Access

Manager main window displays visitors, as shown:

When the Active Badgesoption is selected in the Viewmenu, the Area Access

Manager main window also contains a Badge ID column. In this view, the listing

window lists multiple entries for each cardholder/visitor, one for each active

badge assigned to the cardholder/visitor. For example, if Scott Johnson has two

active badges, 13 and 14, then he will be listed twice.


24/114

2: Main Window

24 revision 1

When you right-click on a record in the listing window in the Area Access

Manager, a menu is displayed. For more information, refer to Main Window

Right-click Menuon page 34.

Area Access Manager Main Window

Form Element Comment

Title bar The area at the top of the window that displays the windows name. In the main window, the

title bar contains the name of the application, the name of the ODBC, and the name of the user

account that is currently logged in.

Menu bar A horizontal list of options that appears at the top of the main window. Each option has a pull-

down menu.

Access level Lists the access levels that can be assigned and removed from a cardholder or visitors active

badges.

Access levels are created on the Access Levels form in the Access Levels folder in

System Administration. (To display this form in System Administration, select the

Access Controlmenu, then select the Access Levelsoption.) Only the access levels

listed there for a user will be available in Area Access Manager for the user to assign and

remove from cardholders active badges.

Access Levels that can be managed by a user are configured on the Area Access Manager

Levels form in the Users folder in System Administration. (To display this form in

System Administration, select the Administrationmenu, then select the Usersoption.)

Assign Access Opens the Access Level Assignment Wizard, which allows you to assign access levels to

cardholders, visitors, or specific cardholder/visitor active badge IDs. Selecting this button is

the same as selecting the Editmenu, then selecting Assign Access.

Remove Access Removes the assignment of the selected cardholder, visitor, or specific cardholder/visitor

active badge IDs from the access level that is displayed in the Access level drop-down list.

Selecting this button is the same as selecting the Editmenu, then selecting Remove Access.

This button is grayed out until at least one cardholder, visitor, or specific cardholder/visitor

active badge ID is selected in the Area Access Manager main window.

Personal

Information

Displays cardholder/visitor, badge, and access level information for the currently selected

cardholder/visitor records. On the Area Access Manager main window, selecting this button is

the same as selecting the Viewmenu, then selecting Personal Information. This button is

grayed out until at least one cardholder/visitor record is selected. If you select multiple

records, you can cycle through them by clicking the arrows in the lower left corner of the

Personal Information window. For more information, refer to Chapter 3: Personal Information

Windowon page 37.


25/114


revision 1 25

View Video Displays cameras associated with the currently selected access level. Video is only available

for cameras that have a device-camera link configured with a reader assigned to an access

level. For more information, refer to Chapter 5: View Videoon page 63.

Access level

activation date

The Access level activation datefields consist of a date field and a time field. They are part of

the Filter bar, and are only shown if the Filter Bar option in the Viewmenu is selected.

The Access level activation datefields work in combination with the Access level

deactivation datefields to filter the records shown in the main window based on the access

level activation date and access level deactivation date assigned to a badge when an access

level is assigned. The access level assignment to the badge is only valid (active) between the

dates and times specified in the assignment. (To learn how to assign access level activation and

deactivation dates, refer to Assign Activation and Deactivation Dates to Access Levelson

page 59.)

So for example, consider a badge that has been assigned an access level with an activation date

of 1/1/2006. The badge will not be allowed to gain access to the readers contained in this

access level until 1/1/2006. Similarly, if the access level assignment to the badge had a

deactivation date of 1/31/2006, the badge would not be allowed to gain access to the readers

contained in this access level after 1/31/2006.

The records displayed in the main window depend on what you select in the Access level

activation dateand Access level deactivation datefields.

If you select an activation date but no deactivation date, then all records with an

activation date after the specified activation date will be displayed.

If you select a deactivation date but no activation date, all records with a deactivation date

before the specified deactivation date will be displayed.

If you select an activation date and a deactivation date, only those records whose

activation and deactivation dates fall between the two specified dates will be displayed.

If you select no activation date or deactivation date, all records will be displayed.

If you select an activation/deactivation date, records without access level activation/

deactivation dates will not be displayed in the main window.

Note: Keep in mind that these fields are merely filtering which records to display; the date

and time do not actually get applied to the badge itself.

Each time you modify the access level activation/deactivation filter date or time, the listing

window is updated with the people that fall within the selected date/time range.

Area Access Manager Main Window (Continued)



26/114

2: Main Window

26 revision 1

Access level

deactivation date

The Access level deactivation datefields consist of a date field and a time field. They are part

of the Filter bar, and are only shown if the Filter Bar option in the Viewmenu is selected.

The Access level deactivation datefields work in combination with the Access levelactivation datefields to filter the records shown in the main window based on the access level

activation date and access level deactivation date assigned to a badge when an access level is

assigned. The access level assignment to the badge is only valid (active) between the dates and

times specified in the assignment. (To learn how to assign access level activation and

deactivation dates, refer to Assign Activation and Deactivation Dates to Access Levelson

page 59.)

So for example, consider a badge that has been assigned an access level with an activation date

of 1/1/2006. The badge will not be allowed to gain access to the readers contained in this

access level until 1/1/2006. Similarly, if the access level assignment to the badge had a

deactivation date of 1/31/2006, the badge would not be allowed to gain access to the readers

contained in this access level after 1/31/2006.

The records displayed in the main window depend on what you select in the Access levelactivation dateand Access level deactivation datefields.

If you select an activation date but no deactivation date, then all records with an

activation date after the specified activation date will be displayed.

If you select a deactivation date but no activation date, all records with a deactivation date

before the specified deactivation date will be displayed.

If you select an activation date and a deactivation date, only those records whose

activation and deactivation dates fall between the two specified dates will be displayed.

If you select no activation date or deactivation date, all records will be displayed.

If you select an activation/deactivation date from the Filter bar, records without access

level activation/deactivation dates will not be displayed in the main window.

Note: Keep in mind that these fields are merely filtering which records to display; the dateand time do not actually get applied to the badge itself.

Each time you modify the access level activation/deactivation filter date or time, the listing

window is updated with the people that fall within the selected date/time range.




27/114


revision 1 27

Person search type This field is a part of the Filter bar, and is only shown if the Filter Bar option in the View

menu is selected.

Enables you to select whether to include badge activation dates when searching forcardholders and visitors.

If Search for people with current badge activation dates is selected, then badges that have

the status Active and have badge activation/deactivation dates that fall within the current

date/time are listed in the listing window.

For example, if you have a badge with an activation date of 1/1/2005 and a deactivation date of

1/31/2005 and you are using Area Access Manager on 1/10/2005, the badge would be

displayed in the main window (assuming the badge is assigned the access level selected from

the Access level drop-down). If you were to use Area Access Manager on 2/1/2005 this badge

would no longer be displayed in the main window since the activation dates assigned to the

badge have already gone by.

If Do not include badge activation dates when searching for people is selected, then allbadges that have the status Active are listed, irregardless of their activation and deactivation

dates. This search option is useful in scenarios where there is a person who has occasional

access to a building, and the IT department enables and disables the badge depending on when

this person comes into the office.




28/114

2: Main Window

28 revision 1

Listing window The contents of the listing window changes depending on whether visitors or cardholders are

displayed. If cardholders are displayed (View> PersonType> Cardholdersis selected), the

listing window functions as follows:

The Activate and Deactivate columns are always present, and represent the activation and

deactivation dates of the assigned access level for each cardholder/visitor badge ID. If Active

Badgesis not selected in the Viewmenu, then the dates shown are the earliest activation date

and the latest deactivation date for all active badges assigned to the cardholder/visitor.

If Active Badgesis selected in the Viewmenu, the listing window contains a Badge ID

column. In this view, the listing window lists multiple entries for each cardholder/visitor, one

for each active badge assigned to the cardholder/visitor.

Additional columns displayed are determined by the fields listed in the Selected Fields column

of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,

you might want to include Last Name, First Name, Middle Name, Extension, and Department.

These same columns are displayed on the Select People and Summary windows in the Access

Level Assignment Wizard.

The results displayed in the listing window are filtered based on the settings in the Filter bar,

which is displayed by selecting Filter Barfrom the Viewmenu. The Activate and Deactivate

filter criteria currently being applied are displayed in the status bar.

To sort the listing windows contents by a particular column, click on the column heading.

Clicking the column heading toggles the sort order between lowest to highest and highest to

lowest.

To select all items in the listing window, select Select Allfrom the Editmenu or press

+. To deselect all items in the listing window, select Clear Allfrom the Editmenu.

If visitors are displayed instead of cardholders (View> PersonType> Visitorsis selected),

the listing window functions the same way, with one exception:

The columns displayed are determined by the fields listed in the Selected Fields column of the

Visitor Search Results Lists form in the Cardholder Options folder. For example, you might

want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.

These same columns are displayed on the Select People and Summary windows in the Access

Level Assignment Wizard.




29/114


revision 1 29

Status bar The status bar is an area along the bottom of the main window that is displayed only when the

Status Baroption in the Editmenu is selected. The status bar displays the following

information:

The activation and deactivation date and time filter criteria that are being applied to the

listing window. (If no filter is being applied, no filter information is displayed in the

status bar.) The filter criteria can be changed using the Filter bar, which is displayed by

selecting Filter Barfrom the Viewmenu.

The current person type setting, which determines what type of record is displayed in the

listing window. When View> Person Type> Cardholdersis selected, cardholder

records are displayed. When View> Person Type> Visitorsis selected, visitor records

are displayed.

The number of records currently selected

The total number of records displayed in the main window




30/114

2: Main Window

30 revision 1

Customize the Select People, Summary, and Area Access

Manager Main Windows

The columns displayed on the Select People window, Summary window, and the

Area Access Manager main window can be changed using System

Administration. To change the columns displayed:

1. Start and login to System Administration.

2. From the Administrationmenu, select the Cardholder Optionsoption.

3. If you are customizing the view when cardholders are displayed, click the

Cardholder Search Results Liststab. If you are customizing the view

when visitors are displayed, click the Visitor Search Results Liststab.

4. Click [Modify].

5. In the Fields column, click on the field you want to be displayed in the Area

Access Manager main window, Select People window, and Summary

window. (Only one field can be selected at a time.)

6. Click the button to add the selected field to the list of fields that will

be displayed.

7. Repeat steps 5and 6until all fields to be displayed are listed in the Selected

Fields column.

8. The order that the fields are listed in the Selected Fields column is the order

that the columns will be displayed in, from left to right, in the Area Access

Manager main window, Select People window, and Summary window.

Select a field in the Selected Fields column, then:

a. Click the button to move the selected field one position to the left,or

b. Click the button to move the selected field one position to the

right.

Notes: The Activate and Deactivate columns are always the last two columns in the

listing window of the Area Access Managers main window regardless of

the list configuration specified on the Cardholder/Visitor Search Results

tabs.

If active badges is turned on (View> Active Badges), the Badge ID column

will be the first column in the listing window of the Area Access Managersmain window regardless of the list configuration specified on the

Cardholder/Visitor Search Results tabs.

9. Click [OK].


31/114


revision 1 31

Menus

The menu bar is a horizontal list of options that appears at the top of the main

window. Each option has a pull-down menu. Area Access Manager contains the

following menus:

Application Menu

Menu option Function

Log On Logs you into the application.

Change Password Opens the Change Password dialog, enabling you to change your password (you must have the

corresponding system level permission to do so).

Log Off Logs you out of the application.

Exit Ends your session.

Edit Menu

Menu option Toolbar button Function

Assign Access Opens the Access Level Assignment Wizard, which allows you to

assign access levels to cardholders or visitors. Selecting this menu

option is the same as clicking the [Assign Access] button.

Remove Access Removes the assignment of the selected cardholder or visitor records

from the access level that displayed in the Access Panel drop-down list.

Selecting this menu option is the same as clicking the [Remove Access]

button. This option is grayed out until at least one cardholder or visitor

record is selected in the Area Access Manager main window.

Set ActivationDates

Displays the Access Level Activation Dates window, where you canselect when to activate and deactivate the access level that is assigned to

the selected cardholder(s), visitor(s), or specific cardholder/visitor

active badge ID(s). This menu option is only available for selection

when a cardholder, visitor, or specific cardholder/visitor active badge

ID record is selected.

Select All Selects all records listed in the currently selected access level.

Clear All Deselects all records listed in the currently selected access level.

Set Automatic

Video View Count

Specifies the number of video channels that should be launched

automatically when viewing video. If the total number of cameras

available is greater than this value, the user will have the choice of

which cameras to view.


32/114

2: Main Window

32 revision 1

View Menu


Toolbar If selected, the Access Level display listbox, [Assign Access]

button, [Remove Access] button, and [Personal Information]button will be displayed. If not selected, they will not be

displayed.

Status Bar If selected, the Status bar at the bottom of the screen will be

displayed. If not selected, it will not be displayed.

Filter Bar If selected, displays the Filter bar in the Area Access Manager

main window, where you can specify access level activation

and/or deactivation date and time criteria that all records

displayed in the main windows listing window must meet.

This in effect filters the records displayed in the main

window.

The current filter settings are displayed in the status bar along

the bottom of the main window, as shown.

The view setting for the Filter bar is stored per-workstation,

and is restored each session.

Active Badges When selected, the listing windows in the main window and

in the Access Level Assignment Wizard: Select People

window will display a Badge ID column. The listing window

will list multiple entries for each cardholder/visitor, one for

each active badge assigned to the cardholder/visitor.

By default, this option is not selected. Whether this option is

selected or deselected is stored on a per user basis on each

workstation in the registry. This means that if a user selects

this option and either logs out of Area Access Manager or

exits the application, the next time the user runs Area Access

Manager, the setting will be restored.


33/114


revision 1 33

Person Type Contains a sub-menu of different person types. When a

person type is selected, that particular kind of record is shown

in the main window. You can only select one type of record to

be shown in the main window at once. Choices include:

Cardholder - If selected, Cardholder records are shown

in the main window

Visitor - If selected, Visitor records are shown in the

main window

To be able to select the Cardholderoption, you must have

permission to view cardholders. (The Cardholdercheckbox

on the Administration> Users> Cardholder Permission

Groups form > Cardholder sub-tab must be selected.)

Otherwise, this option is grayed out.

To be able to select the Visitoroption, you must have

permission to view visitors. (The Visitorcheckbox on theAdministration> Users> Cardholder Permission Groups

form > Cardholder sub-tab must be selected.) Otherwise, this

option is grayed out.

This setting is saved in the registry. Therefore, the last saved

setting is restored from session to session on the same

workstation.

The current person type setting is displayed in the status bar

along the bottom of the main window, as shown.

PersonalInformation

Displays badge, access level, and cardholder or visitorinformation for the currently selected cardholder or visitor

record(s). Selecting this option is the same as clicking the

[Personal Information] button. If you select multiple records,

you can cycle through them by clicking the arrows in the

lower left corner of the Personal Information window.

Note: This option is grayed out until a record is selected

in the Area Access Manager main window.

View Video Displays cameras associated with the currently selected

access level. Video is only available for cameras that have a

device-camera link configured with a reader assigned to an

access level.

Reports Opens a Reports window that contains a list of available

reports to print or preview.

View Menu (Continued)



34/114

2: Main Window

34 revision 1

Main Window Right-click Menu

When you right-click on a record in the listing window in the Area Access

Manager, a menu is displayed.

Log Displays the AreaAccessManagerCardholderBulk.Log file

(which is stored in the C:\Program Files\OnGuard\logs

directory) in the Bulk Access Level Action Results window.

The log is written to when:

Multiple cardholder or visitor records are assigned an

access level.

Access levels are removed from multiple cardholders,

visitors, or active badges.

Updating the access level activation/deactivation dates

for multiple cardholders, visitors, or active badges.

Note: When the active badges setting is used, the log will

only be written to if active badges for multiple

cardholders or visitors have access levels assigned,

removed, or have an activation/deactivation date

removed or updated.

A failure will be written to the log if:

badges are segmented and you try to assign an access

level to a badge that the current Area Access Manager

user does not have segment access to.

you violate the system/segment hardware settings for the

maximum access level assignments allowed per badge

including total, temporary, and standard access level

assignments.

you violate the system/segment hardware settings for the

maximum badge number length.

Refresh Updates the display window.

View Menu (Continued)


Help Menu


Contents Displays online help.

Search Displays online help.

About Area

Access Manager

Displays copyright information, file versions, and additional information about the

application.


35/114


revision 1 35

Main Window Right-click Menu


Remove Access Removes the assignment of the selected cardholder or visitor records from the access level that

displayed in the Access Panel drop-down list. Selecting this option is the same as clicking the[Remove Access] button or selecting Remove Accessfrom the Editmenu. This option is

grayed out until one or more records are selected in the main window.

Set Activation

Dates

Displays the Access Level Activation Dates window, where you can select when to activate

and deactivate the access level that is assigned to the selected cardholder(s), visitor(s), or

specific cardholder/visitor active badge ID(s). Selecting this option is the same as selecting

Remove Accessfrom the Editmenu. This option is only available for selection one or more

cardholder, visitor, or specific cardholder/visitor active badge ID records are selected in the

main window.

Personal

Information

Displays badge, access level, and cardholder or visitor information for the currently selected

cardholder or visitor record(s). Selecting this option is the same as clicking the [Personal

Information] button or selecting Personal Informationfrom the Viewmenu. If you select

multiple records, you can cycle through them by clicking the arrows in the lower left corner of

the Personal Information window.


36/114

2: Main Window

36 revision 1


37/114


revision 1 37

Chapter 3: Personal Information Window

The Personal Information window is displayed by:

selecting one or more cardholder/visitor or badge ID records in the Area

Access Manager main window, and then clicking .

selecting one or more cardholder/visitor or badge ID records in the Select

People window in the Access Level Assignment Wizard, and then clicking

[Personal Information].

selecting one or more cardholder/visitor or badge ID records in the Area

Access Manager main window, and then selecting Personal Information

from the Viewmenu.

double-clicking on a single cardholder or visitor record in the Area Access

Manager main window. (When personal information is viewed this way,

only personal information for the selected cardholder or visitor will be

displayed).

The Personal Information window displays cardholder/visitor, badge, and access

level information for the selected records. If multiple records were selected, use

the arrows in the lower left corner of the window to cycle through the records.

(These arrows do not appear if only one record was selected.)

The first tab may be either the Cardholder tab or the Visitor tab, depending on the

type of record(s) displayed in the Select People window. If View> Person Type

> Cardholdersis selected, the Cardholder tab is displayed. If View> Person

Type> Visitorsis selected, the Visitor tab is displayed.

Personal Information Window - Common Elements

The forms in the Personal Information window are visually divided into four

sections; the right section, the upper-left section, the middle-left section and the

bottom section.

Several of the form elements in these sections are common to every form in the

Personal Information window. Refer to the following table for descriptions of the

common form elements.

Note: This documentation refers to cardholder and visitor data fields that areshipped as the default by Lenel. If you have used the FormsDesigner

application to customize your cardholder or visitor data, the elements on

your forms may be different.


38/114

3: Personal Information Window

38 revision 1

Personal Information Window - Common Elements


Common form elements - right section

Photo display Displays the cardholder/visitors photo as it appears on their badge.

Signature display Displays the cardholder/visitors signature as it appears on their badge.

Last access This field displays information about the most recent valid access by this cardholder, including

the triggered event, date, time and reader name. This is the same information that is displayed

when Show Last Granted Locationoption is selected in the Cardholdermenu in System

Administration.

Note: The information that is displayed in this field in Area Access Manager cannot be

configured any differently. Therefore, even if the Show Last Attempted Location

option in the Cardholdermenu in System Administration is selected, only the most

recent valid access can be displayed in Area Access Manager.

Badge ID Displays the numeric identifier assigned to the cardholder/visitors active badge.

Issue code Displays the issue code assigned to the cardholder/visitors active badge.

Prints Displays the number of times the active badge has been printed.

Activate Displays the date when the badge becomes valid.

Deactivate Displays the date when the badge becomes invalid.

Common form elements - upper-left section

Last name Indicates the cardholder/visitors last name.

First name Indicates the cardholder/visitors first name.

Middle name Indicates the cardholder/visitors middle name.

Cardholder ID Indicates the cardholders ID number.

Note: This field is not displayed for visitors.

Badge type Indicates the cardholder/visitors badge type. Badge types are configured in the Badge Types

folder in System Administration.

Common form elements - bottom section

Displayed if more than one cardholder or visitor record was selected when

was clicked. When selected, moves to the first selected record.


was clicked. When selected, by default moves 10 records back.


was clicked. When selected, moves to the previous selected record.


was clicked. When selected, moves to the next selected record.


39/114


revision 1 39


was clicked. When selected, by default moves 10 records forward.


was clicked. When selected, moves to the last selected record.

Record count Indicates the number of the record selected out of the total number of records selected in the

previous window. For example: 6 of 10.

You can type in a number and click to jump to that record number.

OK Closes the Personal Information window.



40/114


41/114


revision 1 41

Cardholder Form Field Table

Personal Information Window - Cardholder Form


Cardholder data Displays the cardholders information such as name, address and department in these fields.

Record last

changed

Indicates the date on which the selected cardholder record was last modified and saved.

This date is updated only when cardholder information is changed, not when badge

information is changed. The last changed date is saved individually for each badge record as

well.


42/114


42 revision 1

Personal Information Window - Visitor Form


43/114


revision 1 43

Visitor Form Field Table

Personal Information Window - Visitor Form


Visitor data Displays the visitors information such as name, address and organization in these fields.

Last changed Indicates the date on which the selected visitor record was last modified and saved.

This date is updated only when visitor information is changed, not when badge information is

changed. The last changed date is saved individually for each badge record as well.


44/114


44 revision 1

Personal Information Window - Badge Form


45/114


revision 1 45

Badge Form Field Table

Personal Information Window - Badge Form


Badge listing

window

Lists all badges for the selected cardholder.


46/114


46 revision 1

Personal Information Window - Access Levels Form


47/114


revision 1 47

Access Levels Form Field Table

View Personal Information

To view personal information about one or more cardholder or visitor records:

1. In the Area Access Manager main window or the Access Level Assignment

Wizard: Select People window, select one or more records.

2. Click .

3. The Personal Information window opens.

If multiple records were selected, use the arrows in the lower left corner

of the window to cycle through the records.

If only one record was selected, these arrows are not displayed.

You can double-click on a single cardholder/visitor to view personal

information for just that cardholder/visitor.

Note: The first tab may be either the Cardholder tab or the Visitor tab, depending

on the type of record(s) being displayed in the main window. If View>

Personal Information Window - Access Levels Form


Show levels for

badge ID (issuecode)

Lists the badge ID and issue code (in parentheses) for the current active badge. If theShow

inactive badges checkbox is selected, the list includes both the active and the inactivebadge(s) assigned to the selected cardholder. Select a badge ID (issue code) from the list and

the corresponding access levels for that badge will be displayed in the Access levelsdisplay.

Show inactive

badges

When selected, theShow levels for badge ID (issue code) drop-down list will list both the

active and inactive badge(s) assigned to the selected cardholder.

Access levels

display

When theShow unassigned levelscheckbox is selected, lists both access levels that have

been and that can beassigned to the selected cardholder/badge record. If the Show

unassigned levelscheckbox is not selected, only access levels thathave beenassigned will be

listed. If they exist, also displays the access levels activation and deactivation dates.

Show unassigned

levels

When selected, the Access levels display lists both access levels that have beenand that can

beassigned to the selected cardholder/badge record.

Number of levelsassigned

Displays the number of access levels that have been assigned to the selected cardholder/badgerecord. For example: 6 levels assigned.


48/114


48 revision 1

Person Type> Cardholdersis selected, the Cardholder tab is displayed. If

View> Person Type> Visitorsis selected, the Visitor tab is displayed.


49/114


revision 1 49

Chapter 4: Access Levels

What are access levels?An access level is one or more reader/timezone

combinations used to control hardware access by one or more cardholders.

Access levels can be assigned to active badges to define which readers a badge

has access to and at which times.

Types of access levels. OnGuard has two types of access levels: standard access

levels and temporary access levels. The difference between the two is that

temporary access levels have an activation and/or deactivation date, and standard

access levels do not.

Creating standard access levels.Standard access levels are created on the

Access Levels form in the Access Levels folder in System Administration. (To

display this form in System Administration, from the Access Controlmenu,

select Access Levels, then click on the Access Levelstab.)

Creating temporary access levels.Temporary access levels are created by

specifying an activation and/or deactivation date when assigning an access level.

Think of a temporary access level as an override for a standard access level. The

activation and/or deactivation date is applied to the selected active badge, not to

the whole access level.

Controlling what access levels can be managed by a user.The access levels

that can be managed by a user through Area Access Manager are configured on

the Area Access Manager Levels form in the Users folder in System

Administration. (To display this form in System Administration, from the

Administrationmenu, select Users, click on the Users tab, then click on the

Area Access Manager Levels sub-tab.) Only the access levels listed there for a

user will be available in Area Access Manager for the user to assign and remove

from cardholders active badges.

In a segmented system, any access levels that are configured as assignable by

users in other segments MUST be listed as access levels to manage if the user has

access for one of these segments.

What cardholders/visitors are shown.Only cardholders/visitors with active

badges (active status, with an activation date before or the same as the current

date and less than or the same as the deactivation date) will be shown when

viewing access level assignments or searching cardholders/visitors to assign

access levels to.

Viewing access levels assignments.The Area Access Manager main window

allows the user to switch between the access levels they have permission tomanage. When an access level is selected, the cardholders with this access level

will be shown in the list.

Segmentation.A user will only be able to assign and remove access levels from

cardholders who have active badges that are of a badge type that the user has

segment access to.


50/114

4: Access Levels

50 revision 1

Remember, in a segmented system, any access levels that are configured as

assignable by users in other segments MUST be listed as access levels to manage

if the user has access for one of these segments.

Multiple Active Badge Access Level Assignment

Many systems are configured to only allow each cardholder/visitor one active

badge. Systems can also be configured to allow multiple active badges per

cardholder/visitor. This is done in the Active badges per cardholderfield on the

General Cardholder Options form in System Administration or ID

CredentialCenter (Administration> Cardholder Options).

If the system is configured to allow cardholders/visitors to have multiple active

badges, then you may wish to use theView Active Badgesoption in Area Access

Manager to assign any of a cardholder/visitors active badges to a particular

access level. By default, this option is not selected. When you select it (View>

Active Badges), the listing window of the main window and in the Access Level

Assignment Wizard: Select People window will display a Badge ID column. The

listing window will list multiple entries for each cardholder/visitor, one for each

active badge assigned to the cardholder/visitor.

By default, this option is not selected. Whether this option is selected or

deselected is stored on a per user basis on each workstation in the registry. This

means that if a user selects this option and either logs out of Area Access

Manager or exits the application, the next time the user runs Area Access

Manager, the setting will be restored.

For more information, refer to Chapter 2: Main Windowon page 23.

Access Level Assignment on a Segmented System

Access levels that are configured as being assignable by users that have access to

other segments will show up in the Access level drop-down list in the main

window as well as in the Access Levels display on the Select Access Levels

window in the Access Level Assignment Wizard when assigning access levels.

This allows users in different segments to assign access levels from a common

segment, but does not allow them to see each others cardholders. For this to

occur, the following conditions must be met:

The system must be segmented and have the Allow access levels to be

configured as assignable by users in other segmentsfeature enabled. For

more information, refer to the Segmentation appendix in the System

Administration User Guide.

The access levels must be configured to be assignable by users that have

access to other segments. This is done on the Access Level Additional

Segments form in the Access Levels folder in System Administration.


51/114


revision 1 51

The access levels must be selected as access levels to manage from the Area

Access Managers Levels sub-tab on the Users form in the Users folder in

System Administration.

Also, when cardholders are segmented and an access level is assigned to a

cardholder that does not currently belong to the cardholders primary segment or

additional segments, the segment assignment is made behind-the-scenes so that

the proper access level assignment can be made.

Reader Assignments to Cardholders Report on a

Segmented System

A report that you may wish to make available in Area Access Manager is the

Reader Assignments to Cardholders report. This report enables you to print a list

of all cardholders that have access to a particular reader. By default, this report is

not available in Area Access Manager. To make it available in Area AccessManager, refer to Configure Which Reports are Available in Area Access

Manageron page 66.

If any of the access levels that are configured as assignable by users with access

to other segments are available for an Area Access Manager user to assign, in

order for the user to see which cardholders are assigned to the readers that make

up these access levels in the Reader Assignments to Cardholders report, the user

must:

have segment access to the segment that contains the levels that are

configured as assignable by users with access to other segments AND

be able to manage one of the access levels that belongs to this segment from

Area Access Manager.

For example, a common segment (Common Segment 1) may be defined with an

access level (Level 1) that controls two readers. Now this access level (Level 1)

is configured so that it can be assigned by users with access to another segment

(Segment 2). If a user is defined that only has segment access to Segment 2, this

user would then have Level 1 available to manage through Area Access Manager.

When logging into Area Access Manager as this user and running the Reader

Assignments to Cardholders report, the user would not be able to see which

cardholders are assigned

area access manager

Documents