Permissions Quick Reference | Permissions Detailed Reference | Group Configuration
This section covers Permission information and how to set up groups for users. Groups should be configured based upon the modules purchased and the individual needs of the company. If you wish to modify some existing permission structures instead of creating your own from scratch, please submit a support ticket and we will be happy to provide several sql scripts that can create some default permission groups for you.
In general, users should not be granted individual permissions directly; rather users should be assigned to one or more user groups that contain the permissions required for the person's job function. At this time, Visual Casino cannot translate LDAP groups or claims to Visual Casino groups or permissions. Both LDAP and Local Users must be manually assigned to groups to have access to Visual Casino.
Permissions Quick Reference
Table 1: Application Configuration Permissions
Permission | Description |
---|---|
Setup: General Settings | Allow a user to set things such as the report graphic or the Active Directory configuration |
Setup: Daily Log Types | Allow a user to configure Daily Log Types (LOGiT) |
Setup: Incident Types | Allow a user to configure Incident Types (LOGiT) |
Setup: Locations | Allow a user to configure Locations (LOGiT) |
Setup: Tape Colors | Allow a user to configure Tape Colors (LOGiT) |
Setup: Incident Sources | Allow a user to configure Incident Sources (LOGiT) |
Setup: Recovery or Loss Types | Allow a user to configure Recovery/Loss Types (LOGiT) |
Setup: SSIN Keywords | Allow a user to Add/Remove Custom SSIN Keywords |
Setup: Properties | Allow a user to view the configured Properties in the database |
Setup: Dispatch Priorities | Allow a user to configure Dispatch Priorities (LOGiT) |
Setup: Shifts | Allow a user to configure Shifts (LOGiT) |
Setup: Cameras | Allow a user to configure Cameras (LOGiT) |
Setup: Monitors | Allow a user to configure Monitors (LOGiT) |
Setup: Notification Rules | Allow a user to configure Notification Rules (LOGiT) |
Setup: View Outstanding Notifications | Allow a user to see the Property's Outstanding Notifications (LOGiT) |
Setup: View 3M Scan History | |
Setup: Visual Casino V Import | Allow a user to import data from Visual Casino 5 |
Setup: Import SIN Alerts from Visual Casino IV / V | Allow a user to import SIN Alert data from Visual Casino 4 or Visual Casino 5 |
Setup: SSIN Settings | Allow a user to edit the SSIN communication settings (SSIN) |
Setup: CID Settings | Allow a user to edit the CID communication settings (CID) |
Setup: Database Update Settings | Allow a user to configure the licensing update settings |
Setup: FR License Update Settings | Allow a user to manage Facial Recognition licensing (AFR) |
Setup: Email Settings | Allow a user to configure email notification settings (LOGiT) |
Setup: License Manager | Allow a user to manage the application license |
Setup: Setup Advanced Settings | Allow a user to change advanced settings like install polling services or configure proxy settings |
Backup/Restore: Backup the database | Allow a user to create a backup of the Visual Casino database |
Backup/Restore: Restore the database | Allow a user to restore an existing backup of the Visual Casino database |
Incidents: IR Checklist Types |
Allow a user to create Custom Incident Report Checklists |
Table 2: User Management Permissions
Permission | Description |
---|---|
Visual Casino: Access Application | Grant the user the capability to access Visual Casino. |
User Management: View/Load the user management screen | Allow the user to view the User Management modal window |
User Management: Add/Delete Users | Allow the user to add and delete user profiles |
User Management: Add/Delete Groups | Allow the user to add and delete user groups |
User Management: Modify Groups | Allow the user to modify existing user groups |
User Management: Edit Users | Allow the user to modify other user accounts |
User Management: Reset a User's Password | Allow the user to reset another user's password |
Visual Casino: View Current Logins | Allow the user to see the users currently logged in to Visual Casino 7 |
Visual Casino: View Current Logins for all Properties | Allow the user to see the users currently logged in to Visual Casino 7 designated for other properties1 |
Visual Casino: Allow to logout other users | Allow the user to force another user to log out of Visual Casino 7 |
Table 3: SIN/CID Settings
Permission | Description |
---|---|
SSIN Alerts: Search | Allow a user to view and search the received SSIN Alerts |
SSIN Alerts: Add | Allow a user to create and send a SSIN Alert to other properties |
SSIN Alerts: Edit | Allow a user to edit a draft SSIN Alert while it is queued to send |
SSIN Alerts: Delete | Allow a user to delete a received SSIN Alert from the local database |
CID Web Updates: View | Allow a user to view the CID Web Updates panel |
CID Web Updates: Delete | Allow a user to delete a pending CID Web Update |
CID Web Updates: Download and Install |
Allow a user to manually manage CID Web Updates |
Patrons: Search/View CID Enrollment | Allow a user to view/search CID enrollment (X-LST) |
Patrons: Search | Allow a user to use the combined CID/X-LST search tool |
Table 4: X-LST Settings
Permission | Description |
---|---|
Patrons: Search/View X-LST Enrollment | Allow a user to view/search X-LST enrollment |
Patrons: Add | Allow a user to add a patron |
Patrons: Edit | Allow a user to edit patrons |
Patrons: Delete | Allow a user to delete a patron |
Employees: Search | Allow a user to search Employee entries |
Employees: Add | Allow a user to add an employee |
Employees: Edit | Allow a user to edit employees |
Employees: Delete | Allow a user to delete an employee |
Employees: Import | Allow a user to batch import/update employees |
Persons: Import | Allow a user to batch import/update X-LST enrollment |
Corporate Structure: Search | Allow a user to search the corporate structure |
Corporate Structure: Add | Allow a user to add an element to the corporate structure |
Corporate Structure: Edit |
Allow a user to edit corporate structure elements |
Corporate Structure: Delete | Allow a user to delete a corporate structure element |
Permissions: Modify data permissions | Allow a user to modify the permissions of a person |
Permissions: Patron / Suspect /Employee permissions default to Public(All) | Force the default permission for an X-LST entry to be Public to all Visual Casino users with the Patrons: Search/View X-LST Enrollment |
Table 5: LOGiT Settings
Permission | Description |
---|---|
Permissions: Modify data permissions | Allow a user to modify the visibility permissions of an incident report or daily log |
Permissions Detailed Reference
User Management
User Management permissions are available in all licensed versions of Visual Casino. This permission group is related to the management of Authentication and Authorization within Visual Casino.
A user with the permission Setup: General Settings is required to configure Visual Casino to allow for LDAP user authentication.
User Management: View/Load the user management screen
This permission allows the user to view the user management screen. This permission is useful for application administrators, human resources employees, and managers to understand what authentication and authorization permissions have been granted to a specific user.
Requires: Visual Casino: Access Application
Required By: User Management: Add/Delete Users, User Management: Add/Delete Groups, User Management: Modify Groups, User Management: Edit Users, User Management: Reset a User’s password
User Management: Add/Delete Users
This permission allows a user to create and delete users from within Visual Casino. This permission is useful for application administrators and managers to create new users and grant them the ability to use Visual Casino.
Requires: Visual Casino: Access Application, User Management: View/Load the user management screen
Required By: NONE
Note: in order to delete a user, you must first delete all associated data with that user – this is by design to allow for auditing of PII changes and access. Terminated users should be disabled and have all their permissions revoked. Permissions should be revoked by placing the user in a group without the Visual Casino: Access Application permission (this permission is absent, by default, in the Guest group).
User Management: Add/Delete Groups
This permission allows a user to add or delete a user group. This permission is useful for application administrators during application setup or licensing changes to create permission groups for fine-grained access control.
Requires: Visual Casino: Access Application, User Management: View/Load the user management screen
Required By: NONE
Note: there must be no users associated with a permission group before it can be deleted.
User Management: Modify Groups
This permission allows a user to modify the permissions for permission group. This permission is useful for application administrators after application setup or licensing changes to modify permission groups for fine-grained access control in case the initial permissions granted are not sufficient for how the organization desires to use Visual Casino.
Requires: Visual Casino: Access Application, User Management: View/Load the user management screen
Required By: NONE
User Management: Edit Users
This permission allows a user to modify other users of Visual Casino. This includes the ability to change the user’s permission group membership (including their own). This permission should only be granted to application administrators and managers trusted with full control of Visual Casino.
Requires: Visual Casino: Access Application, User Management: View/Load the user management screen
Required By: NONE
User Management: Reset a User’s password
This permission allows a user to reset another user’s password. This permission should only be granted to application administrators and managers trusted with full control of Visual Casino.
Requires: Visual Casino: Access Application, User Management: View/Load the user management screen
Required By: NONE
Note: when using LDAP authentication, this permission is not useful.
Visual Casino
These permissions are available in all licensed versions of Visual Casino. These permissions generally relate to application access.
Visual Casino: Access Application
This permission is required for all Visual Casino users. This permission grants the user the ability to access the application.
Requires: NONE
Required By: ALL
Visual Casino: View Current Logins
This permission grants the user the ability to see all users currently logged in to Visual Casino for their property. This permission is useful if you use the application on multiple terminals and have more terminals than licensing seats.
Requires: Visual Casino: Access Application
Required By: Visual Casino: Allow to logout other users
Visual Casino: View Current Logins for all Properties
This permission grants the user the ability to see all users currently logged in to Visual Casino for all properties associated with the database. This permission is useful for application administrators and managers to monitor application usage across properties or to troubleshoot issues.
Requires: Visual Casino: Access Application
Required By: NONE
Visual Casino: Allow to logout other users
This permission grants the user the ability to end another user’s Visual Casino session. This permission is useful for managers and application administrators to troubleshoot issues, end user sessions that were not properly terminated, or secure Visual Casino on a terminal that was left active.
Requires: Visual Casino: Access Application, Visual Casino: View Current Logins
Required By: NONE
Daily Logs
Daily Log permissions are available to all Visual Casino customers who have the LOGiT module licensed.
Daily Logs: Search
This permission gives the user the ability to view daily log information. This permission is useful for managers and security personnel to manage the daily management workflows at a property (e.g. counts, shift changes, etc.).
Requires: Visual Casino: Access Application
Required By: Daily Logs: Add, Daily Logs: Edit, Daily Logs: Delete, Incidents: Delete, Patrons: Delete, Employees: Delete
Note: daily log information access may be additionally restricted through the use User Groups and Clearance Groups. This permission should only be viewed as granting the general capability to view logs.
Daily Logs: Add
This permission gives the user the ability to create a daily log. This permission is useful for managers and security personnel tasked with report management.
Requires: Visual Casino: Access Application, Daily Logs: Search, Clearance Groups: Search
Required By: NONE
Daily Logs: Edit
This permission gives the user the ability to create edit a daily log. This permission is useful for managers and security personnel tasked with report management.
Requires: Visual Casino: Access Application, Daily Logs: Search
Required By: Incidents: Delete, Patrons: Delete, Employees: Delete
Daily Logs: Delete
This permission gives the user the ability to delete a daily log. This permission is useful for application administrators tasked with implementing data retention policies.
Requires: Visual Casino: Access Application, Daily Logs: Search, Incidents: Search, Incidents: Edit
Required By: NONE
Note: a daily log cannot be deleted unless it is no longer associated with any incidents, patrons, or employees.
Incidents
Incidents permissions are available to all Visual Casino customers who have the LOGiT module licensed.
Incidents: Search
This permission gives the user the ability to search incidents. This permission is useful for managers and investigators.
Requires: Visual Casino: Access Application
Required By: Incidents: Add, Incidents: Edit, Incidents: Delete, Cases: Delete, Daily Logs: Delete
Note: incidents can be further restricted using User Groups or Clearance Groups. This permission should only be viewed as the capability to search for incidents, not the ability to view any specific incident.
Incidents: Add
This permission gives the user the ability to create an incident. This permission is useful for security personnel and investigators to generate new incidents.
Requires: Visual Casino: Access Application, Incidents: Search
Required By: NONE
Incidents: Edit
This permission gives the user the ability to edit an existing incident. This permission is useful for security personnel and investigators to update an incident with new information (e.g. police contact status changed).
Requires: Visual Casino: Access Application, Incidents: Search
Required By: Cases: Delete
Incidents: Delete
This permission gives the user the ability to delete an existing incident. This permission is useful for application administrators tasked with implementing data retention policies.
Requires: Visual Casino: Access Application, Incidents: Search, Cases: Search, Cases: Edit
Required By: NONE
Note: in order to delete an incident, you must remove its association with any Case(s) and Daily Log(s) first.
Incidents: View Audit Log
This permission gives the user the ability to view the audit trail for an incident. This permission is useful for compliance managers.
Requires: Visual Casino: Access Application, Incidents: Search
Required By: NONE
Incidents: Approve
This permission gives the user the ability to approve/deny incidents. This permission is useful for managers to approve or request changes to incidents so that the information complies with organizational requirements.
Requires: Visual Casino: Access Application, Incidents: Search
Required By: NONE
Incidents: IR Checklist Types
This permission gives the user the ability to create custom forms for Incident Reports. This permission is useful for managers or application administrators during initial setup to add custom information field sets for recording incident information.
Requires: Visual Casino: Access Application
Required By: NONE
Patrons
Patrons permissions are available to licensed Visual Casino customers depending on the licensed modules. The modules for LOGiT, X-LST, or CID may be required depending on the permission.
Patrons: Search/View X-LST (was - Patrons: Search/View Local Enrollment)
This permission gives the user the ability to view the patrons enrolled locally in X-LST. This permission is useful for surveillance personnel, security personnel, and investigators.
Requires: Visual Casino: Access Application
Required By: Patrons: Add, Patrons: Edit, Patrons: Delete
Patrons: Search/View CID Enrollment
This permission gives the user the ability to view the CID database supplied and updated by Biometrica Systems, Inc. This permission is useful for surveillance personnel, security personnel, and investigators.
Requires: Visual Casino: Access Application
Required By: NONE
Patrons: Search
This permission grants the user access to the search tool in Visual Casino. This permission is useful for surveillance personnel, security personnel, and investigators.
Requires: Visual Casino: Access Application
Required By: NONE
Patrons: Add
This permission gives the user the ability to add a patron to X-LST. This permission is useful for security personnel and investigators.
Requires: Visual Casino: Access Application, Search/View X-LST
Required By: NONE
Patrons: Edit
This permission gives the user the ability to edit an existing patron to X-LST. This permission is useful for security personnel and investigators.
Requires: Visual Casino: Access Application, Search/View X-LST
Required By: NONE
Patrons: Delete
This permission gives the user the ability to delete a patron from X-LST. This permission is useful for application administrators tasked with implementing data retention policies.
Requires: Visual Casino: Access Application, Search/View X-LST
Required By: NONE
Persons: Import
This permission gives the user the ability to import X-LST and/or CID data manually. This permission is useful for application administrators and managers.
Requires: Visual Casino: Access Application
Required By: NONE
Corporate Structure
Corporate Structure permissions are available to all Visual Casino Customers who have the LOGiT module licensed. These permissions are used to create a Corporate Structure for Employees to reside (for inclusion in activities like dispatch, or incident reporting).
Corporate Structure: Search
This permission gives the user the ability to view and search the Corporate Structure. This permission is useful for managers, security personnel, and others who need to search for employees based on their position.
Requires: Visual Casino: Access Application
Required By: Corporate Structure: Add, Corporate Structure: Edit, Corporate Structure: Delete, Corporate Structure: Procedure Violation Routing
Corporate Structure: Add
This permission gives the user the ability to create new elements in the Corporate Structure. This permission is useful during initial setup and for human resources personnel to create or update the corporate structure.
Requires: Visual Casino: Access Application, Corporate Structure: Search, Employees: Search
Required By: Corporate Structure: Procedure Violation Routing
Corporate Structure: Edit
This permission gives the user the ability to edit elements in the Corporate Structure. This permission is useful during initial setup and for human resources personnel to create or update the corporate structure.
Requires: Visual Casino: Access Application, Corporate Structure: Search, Employees: Search
Required By: Corporate Structure: Procedure Violation Routing
Corporate Structure: Delete
This permission gives the user the ability to delete an element in the Corporate Structure. This permission is useful for human resources personnel who update the corporate structure.
Requires: Visual Casino: Access Application, Corporate Structure: Search
Required By: None
Corporate Structure: Procedure Violation Routing
This permission gives the user the ability to configure procedure violation routing for notifications. This permission is useful during initial setup and for human resources personnel to configure how procedure violations are reported.
Requires: Visual Casino: Access Application, Corporate Structure: Search, Corporate Structure: Add, Corporate Structure: Edit, Employees: Search
Required By: None
Group Configuration
To create a security group, you will need an application user that has the permissions User Management: View/Load the user management screen
and User Manager: Add/Delete Groups
.
- Select Administration > User Manager ...
- in the dialog window, select File > New Group
- Name the group; optionally, provide a description for the group.
- Choose the permissions required for this group - for example, a Surveillance Operator group might require permissions
SIN Alerts: Search
,SIN Alerts: Add
, andSIN Alerts: Edit
. Note: All users require the permissionVisual Casino: Access Application
in order to use Visual Casino - Click OK to save the security group