Professional Documents
Culture Documents
User Guide
PERPETUAL INNOVATION
Lenel OnGuard 2010 Area Access Manager User Guide, product version 6.4
This guide is part 2 of a 2-document suite, item number DOC-800, revision 1.015, April
2010
Copyright 1995-2010 Lenel Systems International, Inc. Information in this document is subject
to change without notice. No part of this document may be reproduced or transmitted in any form
or by any means, electronic or mechanical, for any purpose, without the express written
permission of Lenel Systems International, Inc.
Non-English versions of Lenel documents are offered as a service to our global audiences. We
have attempted to provide an accurate translation of the text, but the official text is the English
text, and any differences in the translation are not binding and have no legal effect.
The software described in this document is furnished under a license agreement and may only be
used in accordance with the terms of that agreement. Lenel and OnGuard are registered trademarks
of Lenel Systems International, Inc.
Microsoft, Windows, Windows Server, and Windows Vista are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries. Integral and
FlashPoint are trademarks of Integral Technologies, Inc. Crystal Reports for Windows is a
trademark of Crystal Computer Services, Inc. Oracle is a registered trademark of Oracle
Corporation. Other product names mentioned in this User Guide may be trademarks or registered
trademarks of their respective companies and are hereby acknowledged.
Portions of this product were created using LEADTOOLS 1991-2010 LEAD Technologies, Inc.
ALL RIGHTS RESERVED.
OnGuard includes ImageStream Graphic Filters. Copyright 1991-2010 Inso Corporation. All
rights reserved. ImageStream Graphic Filters and ImageStream are registered trademarks of Inso
Corporation.
Table of Contents
Chapter 1: Introduction ...............................................................9
Conventions Used in this Documentation ....................................................... 9
Getting Started .............................................................................................. 10
Licensing Requirements .................................................................................................. 10
Permissions ..................................................................................................................... 10
Passwords ....................................................................................................................... 11
Enable/Disable Strong Password Enforcement .............................................................. 12
Change User Passwords ................................................................................................ 13
Error Messages ............................................................................................................... 13
Accounts ......................................................................................................................... 14
Log In .............................................................................................................................. 15
revision 1 3
Table of Contents
4 revision 1
Appendix ...........................................................................79
Appendix A: Access Level Assignment Wizard .....................81
Using Listing Windows .................................................................................. 81
Find People Window - Cardholder Form ....................................................... 82
revision 1 5
Table of Contents
6 revision 1
Index ...............................................................................................111
revision 1 7
Table of Contents
8 revision 1
Chapter 1:
Introduction
Area Access Manager users can assign, modify, or remove access levels for
active badges. This effectively grants or restricts a cardholder or visitors access
to readers that control specific areas. An Area Access Manager user has control
over specific access levels that are assigned in System Administration. Area
Access Manager can be used to:
1.
2.
3.
Bulk modify the access level activation and/or deactivation date of active
badges
4.
5.
6.
revision 1 9
1: Introduction
Getting Started
Licensing Requirements
To use Area Access Manager, you must have purchased the Area Access
Manager. In the Access Control section of your OnGuard license, the following
will be listed:
Area Access Manager Application: In Use - the number of concurrent Area
Access Manager licenses being used
Area Access Manager Application: Max - the number of concurrent Area
Access Manager licenses you have purchased
For more information, refer to Installing Your OnGuard License in the
Installation Guide.
Permissions
Permissions are set in System Administration or ID CredentialCenter. In order to
log into Area Access Manager, a user must have the following permissions:
1.
The user must have permission to use the Area Access Manager application.
2.
3.
Note:
If the user has permission to view access level assignments but not modify
them, then the user can log into Area Access Manager, but cannot assign,
remove, or modify access level activation dates.
4.
The user must have permission to view either cardholders OR visitors. The
user must have permission to view at least one of these.
5.
The user must have permission to view at least one of the cardholder search
results list fields OR at least one of the visitor search results list fields.
Select the Area Access Manager checkbox on the Administration > Users > System
Permission Groups form > Software Options sub-tab.
The access levels that can be managed by a user through Area Access Manager are configured
on the Area Access Manager Levels form in the Users folder in System Administration. (To
display this form in System Administration, from the Administration menu, select Users,
click on the Users tab, then click on the Area Access Manager Levels sub-tab.
Select the Access level assignments checkbox on the Administration > Users > Cardholder
Permission Groups form > Badge sub-tab.
10 revision 1
Permission
Modify access
level assignments
Select the Access level assignments and Modify checkboxes on the Administration > Users
> Cardholder Permission Groups form > Badge sub-tab.
View Cardholders
Select the Cardholder checkbox on the Administration > Users > Cardholder Permission
Groups form > Cardholder sub-tab.
View permission
for at least one of
the cardholder
fields in the
cardholder search
results list
To view the cardholder search results list, select Administration > Cardholder Options >
Cardholder Search Results Lists form.
To view the permissions for the fields in the cardholder search results list, select
Administration > Users > Field/Page Permission Groups form. You should add a permission
group for Area Access Manager users with the necessary cardholder permissions set to Yes.
(For more information, refer to Add a Field/Viewing Permission Group in the System
Administration User Guide.)
For example, if Last Name is listed in the Selected Fields listing window on the Cardholder
Search Results Lists form, the View permission for the Cardholder Table/Last Name Field
entry on the Field/Page Permission Groups form should be set to Yes.
View Visitors
Select the Visitor checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab.
View permission
for at least one of
the visitor fields in
the visitor search
results list
To view the visitor search results list, select Administration > Cardholder Options > Visitor
Search Results Lists form.
To view the permissions for the fields in the visitor search results list, select Administration >
Users > Field/Page Permission Groups form. You should add a permission group for Area
Access Manager users with the necessary visitor permissions set to Yes. (For more
information, refer to Add a Field/Viewing Permission Group in the System Administration
User Guide.)
For example, if Organization is listed in the Selected Fields listing window on the Visitor
Search Results Lists form, the View permission for the User-Defined Visitor Table/Visitor
Organization Field entry on the Field/Page Permission Groups form should be set to Yes.
If the user can view cardholders but cannot view at least one cardholder
search result list field and the user cannot view visitors, the user will not be
allowed to log into the application.
If the user can view visitors but cannot view at least one visitor search result
list field and the user cannot view cardholders, the user will not be allowed
to log into the application.
The system-wide report permissions are not enforced because Area Access
Manager only contains reports that are specific to data that is available within
Area Access Manager. This means that any Area Access Manager user can run
reports in Area Access Manager.
Passwords
OnGuard includes strong password enforcement, which checks the users
password against password standards. This functionality is designed to enhance
password security if single sign-on is not used. If single sign-on is used
revision 1 11
1: Introduction
(automatic or manual), OnGuard does not enforce password standards. For more
information on single sign-on, refer to Single Sign-On on page 16.
The systems strong password enforcement also checks the Lenel database users
password when logging into applications. Database user passwords apply only to
Oracle and SQL databases. For information on changing your database password,
refer to the Accounts and Passwords chapter in the Installation Guide.
Password Standards
When creating a strong password keep the following guidelines in mind:
Passwords cannot be the same as the user name (e.g. SA, SA).
Although not required, your password should contain numbers, letters, and
symbols. Spaces are also acceptable. (e.g. August 18, 2002).
Database passwords conform to the rules of the specific database being used;
passwords in SQL Server and Oracle 11g are case sensitive. Passwords in
Oracle 10g and earlier are case-insensitive.
The maximum value for a strong password is 127 characters. The minimum
value is 1.
Notes:
For Oracle databases the following account username and passwords are not
allowed to be used together:
System and Manager
Internal and Oracle
Sys and Change_On_Install
12 revision 1
1.
2.
3.
Click [Modify].
4.
Note:
If you disable the option to enforce strong passwords, you will continue to
receive a message stating your password is weak every time you log into an
application until you change your OnGuard password to meet the password
standards.
5.
Click [OK].
2.
The Change Password window displays. Enter your old password and new
password in the appropriate fields. Refer to the Password Standards on page
12 for guidelines in choosing a secure password.
3.
4.
Click [OK].
Note:
If you get a weak password message the next time you log into the
application, carefully read the message. It may be telling you that your
database password is weak and not your user password. To change your
database password, refer to the Accounts and Passwords chapter in the
Installation Guide.
Error Messages
Read weak password messages/warnings carefully to avoid confusion about
whether your user password or database password is weak.
If you have a weak database password you will receive a warning every time you
log into any application, until you change your database password. Although it is
not recommended, you can acknowledge the warning and continue working in
the application. This table describes the password-related error messages that
may be generated and which password you need to correct.
To correct the user password, select a password that meets the standards
specified in Password Standards on page 12.
Warning message
Password
to correct
Database
revision 1 13
1: Introduction
Warning message
Password
to correct
User
User
User
Accounts
Anyone who wishes to use OnGuard applications must enter a user name and
password in order to access the software. The System Administrator should
create a unique account for each user of the applications. The System
Administrator can also, for each user, create a list of permissions, which specifies
precisely which screens, fields, and buttons the user can access.
During initial installation of the application, default accounts are created. These
include:
User name
Password
Type
sa
sa
system account
admin
sample
user
sample
badge
sample
These are provided as samples. You may change the passwords and use the
accounts, or remove them. The exception to this is the system account, SA. By
definition this account has permission to do anything in the system. A user with
system access has unlimited access to the application. You cannot delete or
change the system account except to modify the password, which you are
strongly encouraged to do as soon as possible to discourage unauthorized use.
The first time you log into OnGuard to configure the application, you should log
in as SA and your password should be SA.
14 revision 1
Log In
This procedure describes how to log in without using single sign-on. For a
description of single sign-on, refer to Single Sign-On on page 16. To log in using
single sign-on, refer to Configure Single Sign-On on page 17.
1.
Click the Start button, then select Programs > OnGuard 2010 > Area
Access Manager.
2.
3.
Important:
a.
b.
Click [OK].
In the User name field, type the user name assigned to you. When
logging in for the first time, your user name is SA.
b.
After logging in for the first time, you are strongly encouraged to modify the
password for the system account as soon as possible to discourage
unauthorized use.
c.
In the Directory field, select the directory that you wish to log into. For
user accounts not using single sign-on, the default is <Internal>.
d.
Select the Remember user name and directory checkbox if you want
the values you just entered in the User name and Directory fields to
automatically be selected the next time that you log in.
e.
Click [OK].
4.
Your system may be configured to prompt you to confirm that you are
authorized to use the application. To accept the terms of the authorization
warning click [Yes].
5.
The Select Segment window opens. Select the segment you wish to log
into.
b.
Click [OK].
revision 1 15
1: Introduction
Single Sign-On
Single sign-on simply means logging into OnGuard with the same user name and
password that you use to log into Windows or logging into OnGuard using an
LDAP user name and password for authentication. LDAP (Lightweight Directory
Access Protocol) is a software protocol that enables you to locate businesses,
people, files, and devices without knowing the domain name (network address).
Single sign-on allows scripts using the DataConduIT API to authenticate. These
scripts will be run under a Windows account. The account that is making the call
to the API can be obtained easily this way, and the script can be restricted to
those actions that the user is permitted to perform (using standard OnGuard
permissions).
Note:
The use of the explicit username and password for directory authentication
to Windows is strongly discouraged. It is recommended that you do not store
Windows passwords in the OnGuard system, since OnGuard uses reversible
encryption and Windows does not. If explicit authentication is required, you
should use an account that has view only permission to the directory in
question.
Allowing a user to log on in multiple ways increases the probability that the
user's access to the system could be compromised. It is recommended that
you standardize on either internal or directory accounts, but not both.
There are cases where assigning both an internal account and a directory account
to a user may make sense. In a system where directory accounts are
predominantly used, you may also assign an internal account to a user who needs
to access the system from locations where the directory service is unavailable. If
internal accounts are predominantly used, you may want to assign a directory
account to a user so that the user does not need to enter in a password to log on.
Directory Accounts
To log into OnGuard using single sign-on, a user name, password, and directory
are required. A directory is a database of network resources, such as printers,
software applications, databases, and users. The following directories are
supported by OnGuard: Microsoft Active Directory, Microsoft Windows NT 4
Domain, Microsoft Windows Local Accounts, and LDAP.
16 revision 1
Manual single sign-on can be used with the following directories: Microsoft
Active Directory, Microsoft Windows NT 4 Domain, and LDAP.
Automatic single sign-on can be used with every directory supported by
OnGuard except LDAP because it doesnt provide all the account
information required.
revision 1 17
1: Introduction
Notes:
18 revision 1
1.
Click the Start button, then select Programs > OnGuard 2010 > Area
Access Manager.
2.
b.
Click [OK].
3.
4.
Your system may be configured to prompt you to confirm that you are
authorized to use the application. To accept the terms of the authorization
warning, click [Yes].
5.
The Select Segment window opens. Select the segment you wish to log
into.
b.
Click [OK].
Click the Start button, then select Programs > OnGuard 2010 > Area
Access Manager.
2.
3.
a.
b.
Click [OK].
In the Directory field, select the directory that you wish to log into. The
default is <Internal>.
b.
In the User name field, type the Windows user name assigned to you.
Do not enter the domain\user name just enter your user name.
c.
d.
Select the Remember user name and directory checkbox if you want
the values you just entered in the User name and Directory fields to
automatically be selected the next time that you log in.
e.
Click [OK].
4.
Your system may be configured to prompt you to confirm that you are
authorized to use the application. To accept the terms of the authorization
warning, click [Yes].
5.
The Select Segment window opens. Select the segment you wish to log
into.
b.
Click [OK].
Troubleshoot Logging In
If you attempted to log in and were unable to do so, make sure that the following
conditions have been met:
revision 1 19
1: Introduction
If you attempted to log in and were unable to do so, make sure the following
conditions have been met:
You entered the correct user name and password for the selected
directory of a user with permission to use the application.
If the system is configured to display an authorization warning, then you
accepted the terms.
Verify your acs.ini file has the correct LicenseServer Host and Port
settings. The LS License Server service must be started on the specified
Host.
Log into the License Administration application to verify a valid license
is installed.
Software based licenses must be activated.
USB and Parallel licenses must have License Key Drivers installed.
If using single sign-on, ensure the pc user you are logged in as is linked
to an internal OnGuard user through an operational directory.
20 revision 1
If there is only one access level to work with, that access level will always be
selected by default regardless of how many people are assigned to that
access level.
If you have multiple access levels to work with and the first access level in
the Access level drop-down will return less than 5000 people, then the first
access level will be selected by default.
If the first access level would return 5000 or more people, no access level
will be loaded by default. Instead, the Access level listing window will be
expanded, and you can choose which access level to load.
Note:
Although the default Person Count Threshold value of 5000 works well for
most systems, it is possible to change it. For more information, refer to
Appendix D: Person Count Threshold Value on page 103.
2.
All open data entry forms will be closed. The main window will open again
as it did before you logged in and most of the toolbar and menu options will
be dimmed. To access most of the applications features you must then log in
again.
revision 1 21
1: Introduction
22 revision 1
Chapter 2:
Main Window
You can use the Area Access Manager main window to do the following:
The Area Access Manager main window can display two different types of
records: cardholder and visitor. Only one type of record can be displayed at a
time. When the View > Person Type > Cardholders option is selected, the Area
Access Manager main window displays cardholders, as shown:
When the View > Person Type > Visitors option is selected, the Area Access
Manager main window displays visitors, as shown:
When the Active Badges option is selected in the View menu, the Area Access
Manager main window also contains a Badge ID column. In this view, the listing
window lists multiple entries for each cardholder/visitor, one for each active
badge assigned to the cardholder/visitor. For example, if Scott Johnson has two
active badges, 13 and 14, then he will be listed twice.
revision 1 23
2: Main Window
When you right-click on a record in the listing window in the Area Access
Manager, a menu is displayed. For more information, refer to Main Window
Right-click Menu on page 34.
Comment
Title bar
The area at the top of the window that displays the windows name. In the main window, the
title bar contains the name of the application, the name of the ODBC, and the name of the user
account that is currently logged in.
Menu bar
A horizontal list of options that appears at the top of the main window. Each option has a pulldown menu.
Access level
Lists the access levels that can be assigned and removed from a cardholder or visitors active
badges.
Access levels are created on the Access Levels form in the Access Levels folder in
System Administration. (To display this form in System Administration, select the
Access Control menu, then select the Access Levels option.) Only the access levels
listed there for a user will be available in Area Access Manager for the user to assign and
remove from cardholders active badges.
Access Levels that can be managed by a user are configured on the Area Access Manager
Levels form in the Users folder in System Administration. (To display this form in
System Administration, select the Administration menu, then select the Users option.)
Assign Access
Opens the Access Level Assignment Wizard, which allows you to assign access levels to
cardholders, visitors, or specific cardholder/visitor active badge IDs. Selecting this button is
the same as selecting the Edit menu, then selecting Assign Access.
Remove Access
Personal
Information
Displays cardholder/visitor, badge, and access level information for the currently selected
cardholder/visitor records. On the Area Access Manager main window, selecting this button is
the same as selecting the View menu, then selecting Personal Information. This button is
grayed out until at least one cardholder/visitor record is selected. If you select multiple
records, you can cycle through them by clicking the arrows in the lower left corner of the
Personal Information window. For more information, refer to Chapter 3: Personal Information
Window on page 37.
24 revision 1
Comment
View Video
Displays cameras associated with the currently selected access level. Video is only available
for cameras that have a device-camera link configured with a reader assigned to an access
level. For more information, refer to Chapter 5: View Video on page 63.
Access level
activation date
The Access level activation date fields consist of a date field and a time field. They are part of
the Filter bar, and are only shown if the Filter Bar option in the View menu is selected.
The Access level activation date fields work in combination with the Access level
deactivation date fields to filter the records shown in the main window based on the access
level activation date and access level deactivation date assigned to a badge when an access
level is assigned. The access level assignment to the badge is only valid (active) between the
dates and times specified in the assignment. (To learn how to assign access level activation and
deactivation dates, refer to Assign Activation and Deactivation Dates to Access Levels on
page 59.)
So for example, consider a badge that has been assigned an access level with an activation date
of 1/1/2006. The badge will not be allowed to gain access to the readers contained in this
access level until 1/1/2006. Similarly, if the access level assignment to the badge had a
deactivation date of 1/31/2006, the badge would not be allowed to gain access to the readers
contained in this access level after 1/31/2006.
The records displayed in the main window depend on what you select in the Access level
activation date and Access level deactivation date fields.
If you select an activation date but no deactivation date, then all records with an
activation date after the specified activation date will be displayed.
If you select a deactivation date but no activation date, all records with a deactivation date
before the specified deactivation date will be displayed.
If you select an activation date and a deactivation date, only those records whose
activation and deactivation dates fall between the two specified dates will be displayed.
If you select no activation date or deactivation date, all records will be displayed.
Note:
Keep in mind that these fields are merely filtering which records to display; the date
and time do not actually get applied to the badge itself.
Each time you modify the access level activation/deactivation filter date or time, the listing
window is updated with the people that fall within the selected date/time range.
revision 1 25
2: Main Window
Comment
Access level
deactivation date
The Access level deactivation date fields consist of a date field and a time field. They are part
of the Filter bar, and are only shown if the Filter Bar option in the View menu is selected.
The Access level deactivation date fields work in combination with the Access level
activation date fields to filter the records shown in the main window based on the access level
activation date and access level deactivation date assigned to a badge when an access level is
assigned. The access level assignment to the badge is only valid (active) between the dates and
times specified in the assignment. (To learn how to assign access level activation and
deactivation dates, refer to Assign Activation and Deactivation Dates to Access Levels on
page 59.)
So for example, consider a badge that has been assigned an access level with an activation date
of 1/1/2006. The badge will not be allowed to gain access to the readers contained in this
access level until 1/1/2006. Similarly, if the access level assignment to the badge had a
deactivation date of 1/31/2006, the badge would not be allowed to gain access to the readers
contained in this access level after 1/31/2006.
The records displayed in the main window depend on what you select in the Access level
activation date and Access level deactivation date fields.
If you select an activation date but no deactivation date, then all records with an
activation date after the specified activation date will be displayed.
If you select a deactivation date but no activation date, all records with a deactivation date
before the specified deactivation date will be displayed.
If you select an activation date and a deactivation date, only those records whose
activation and deactivation dates fall between the two specified dates will be displayed.
If you select no activation date or deactivation date, all records will be displayed.
If you select an activation/deactivation date from the Filter bar, records without access
level activation/deactivation dates will not be displayed in the main window.
Note:
Keep in mind that these fields are merely filtering which records to display; the date
and time do not actually get applied to the badge itself.
Each time you modify the access level activation/deactivation filter date or time, the listing
window is updated with the people that fall within the selected date/time range.
26 revision 1
Comment
This field is a part of the Filter bar, and is only shown if the Filter Bar option in the View
menu is selected.
Enables you to select whether to include badge activation dates when searching for
cardholders and visitors.
If Search for people with current badge activation dates is selected, then badges that have
the status Active and have badge activation/deactivation dates that fall within the current
date/time are listed in the listing window.
For example, if you have a badge with an activation date of 1/1/2005 and a deactivation date of
1/31/2005 and you are using Area Access Manager on 1/10/2005, the badge would be
displayed in the main window (assuming the badge is assigned the access level selected from
the Access level drop-down). If you were to use Area Access Manager on 2/1/2005 this badge
would no longer be displayed in the main window since the activation dates assigned to the
badge have already gone by.
If Do not include badge activation dates when searching for people is selected, then all
badges that have the status Active are listed, irregardless of their activation and deactivation
dates. This search option is useful in scenarios where there is a person who has occasional
access to a building, and the IT department enables and disables the badge depending on when
this person comes into the office.
revision 1 27
2: Main Window
Comment
Listing window
The contents of the listing window changes depending on whether visitors or cardholders are
displayed. If cardholders are displayed (View > Person Type > Cardholders is selected), the
listing window functions as follows:
The Activate and Deactivate columns are always present, and represent the activation and
deactivation dates of the assigned access level for each cardholder/visitor badge ID. If Active
Badges is not selected in the View menu, then the dates shown are the earliest activation date
and the latest deactivation date for all active badges assigned to the cardholder/visitor.
If Active Badges is selected in the View menu, the listing window contains a Badge ID
column. In this view, the listing window lists multiple entries for each cardholder/visitor, one
for each active badge assigned to the cardholder/visitor.
Additional columns displayed are determined by the fields listed in the Selected Fields column
of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,
you might want to include Last Name, First Name, Middle Name, Extension, and Department.
These same columns are displayed on the Select People and Summary windows in the Access
Level Assignment Wizard.
The results displayed in the listing window are filtered based on the settings in the Filter bar,
which is displayed by selecting Filter Bar from the View menu. The Activate and Deactivate
filter criteria currently being applied are displayed in the status bar.
To sort the listing windows contents by a particular column, click on the column heading.
Clicking the column heading toggles the sort order between lowest to highest and highest to
lowest.
To select all items in the listing window, select Select All from the Edit menu or press
<Ctrl>+<A>. To deselect all items in the listing window, select Clear All from the Edit menu.
If visitors are displayed instead of cardholders (View > Person Type > Visitors is selected),
the listing window functions the same way, with one exception:
The columns displayed are determined by the fields listed in the Selected Fields column of the
Visitor Search Results Lists form in the Cardholder Options folder. For example, you might
want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.
These same columns are displayed on the Select People and Summary windows in the Access
Level Assignment Wizard.
28 revision 1
Comment
Status bar
The status bar is an area along the bottom of the main window that is displayed only when the
Status Bar option in the Edit menu is selected. The status bar displays the following
information:
The activation and deactivation date and time filter criteria that are being applied to the
listing window. (If no filter is being applied, no filter information is displayed in the
status bar.) The filter criteria can be changed using the Filter bar, which is displayed by
selecting Filter Bar from the View menu.
The current person type setting, which determines what type of record is displayed in the
listing window. When View > Person Type > Cardholders is selected, cardholder
records are displayed. When View > Person Type > Visitors is selected, visitor records
are displayed.
revision 1 29
2: Main Window
2.
3.
If you are customizing the view when cardholders are displayed, click the
Cardholder Search Results Lists tab. If you are customizing the view
when visitors are displayed, click the Visitor Search Results Lists tab.
4.
Click [Modify].
5.
In the Fields column, click on the field you want to be displayed in the Area
Access Manager main window, Select People window, and Summary
window. (Only one field can be selected at a time.)
6.
Click the
be displayed.
7.
Repeat steps 5 and 6 until all fields to be displayed are listed in the Selected
Fields column.
8.
The order that the fields are listed in the Selected Fields column is the order
that the columns will be displayed in, from left to right, in the Area Access
Manager main window, Select People window, and Summary window.
Select a field in the Selected Fields column, then:
Notes:
button to add the selected field to the list of fields that will
a.
Click the
or
b.
Click the
right.
The Activate and Deactivate columns are always the last two columns in the
listing window of the Area Access Managers main window regardless of
the list configuration specified on the Cardholder/Visitor Search Results
tabs.
If active badges is turned on (View > Active Badges), the Badge ID column
will be the first column in the listing window of the Area Access Managers
main window regardless of the list configuration specified on the
Cardholder/Visitor Search Results tabs.
9.
30 revision 1
Click [OK].
Menus
The menu bar is a horizontal list of options that appears at the top of the main
window. Each option has a pull-down menu. Area Access Manager contains the
following menus:
Application Menu
Menu option
Function
Log On
Change Password
Opens the Change Password dialog, enabling you to change your password (you must have the
corresponding system level permission to do so).
Log Off
Exit
Edit Menu
Menu option
Toolbar button
Function
Assign Access
Remove Access
Set Activation
Dates
Displays the Access Level Activation Dates window, where you can
select when to activate and deactivate the access level that is assigned to
the selected cardholder(s), visitor(s), or specific cardholder/visitor
active badge ID(s). This menu option is only available for selection
when a cardholder, visitor, or specific cardholder/visitor active badge
ID record is selected.
Select All
Clear All
Set Automatic
Video View Count
revision 1 31
2: Main Window
View Menu
Menu option
Toolbar button
Function
Toolbar
Status Bar
Filter Bar
32 revision 1
Toolbar button
Function
Contains a sub-menu of different person types. When a
person type is selected, that particular kind of record is shown
in the main window. You can only select one type of record to
be shown in the main window at once. Choices include:
Personal
Information
View Video
Reports
revision 1 33
2: Main Window
Toolbar button
Function
Displays the AreaAccessManagerCardholderBulk.Log file
(which is stored in the C:\Program Files\OnGuard\logs
directory) in the Bulk Access Level Action Results window.
The log is written to when:
Log
Note:
Refresh
Help Menu
Menu option
Function
Contents
Search
About Area
Access Manager
Displays copyright information, file versions, and additional information about the
application.
34 revision 1
Function
Remove Access
Removes the assignment of the selected cardholder or visitor records from the access level that
displayed in the Access Panel drop-down list. Selecting this option is the same as clicking the
[Remove Access] button or selecting Remove Access from the Edit menu. This option is
grayed out until one or more records are selected in the main window.
Set Activation
Dates
Displays the Access Level Activation Dates window, where you can select when to activate
and deactivate the access level that is assigned to the selected cardholder(s), visitor(s), or
specific cardholder/visitor active badge ID(s). Selecting this option is the same as selecting
Remove Access from the Edit menu. This option is only available for selection one or more
cardholder, visitor, or specific cardholder/visitor active badge ID records are selected in the
main window.
Personal
Information
Displays badge, access level, and cardholder or visitor information for the currently selected
cardholder or visitor record(s). Selecting this option is the same as clicking the [Personal
Information] button or selecting Personal Information from the View menu. If you select
multiple records, you can cycle through them by clicking the arrows in the lower left corner of
the Personal Information window.
revision 1 35
2: Main Window
36 revision 1
Chapter 3:
This documentation refers to cardholder and visitor data fields that are
shipped as the default by Lenel. If you have used the FormsDesigner
application to customize your cardholder or visitor data, the elements on
your forms may be different.
revision 1 37
Comment
Signature display
Last access
This field displays information about the most recent valid access by this cardholder, including
the triggered event, date, time and reader name. This is the same information that is displayed
when Show Last Granted Location option is selected in the Cardholder menu in System
Administration.
Note:
The information that is displayed in this field in Area Access Manager cannot be
configured any differently. Therefore, even if the Show Last Attempted Location
option in the Cardholder menu in System Administration is selected, only the most
recent valid access can be displayed in Area Access Manager.
Badge ID
Issue code
Prints
Displays the number of times the active badge has been printed.
Activate
Deactivate
First name
Middle name
Cardholder ID
Badge type
Indicates the cardholder/visitors badge type. Badge types are configured in the Badge Types
folder in System Administration.
38 revision 1
Form Element
Comment
Displayed if more than one cardholder or visitor record was selected when
was clicked. When selected, by default moves 10 records forward.
Displayed if more than one cardholder or visitor record was selected when
was clicked. When selected, moves to the last selected record.
Record count
Indicates the number of the record selected out of the total number of records selected in the
previous window. For example: 6 of 10.
You can type in a number and click <Enter> to jump to that record number.
OK
revision 1 39
40 revision 1
Comment
Cardholder data
Displays the cardholders information such as name, address and department in these fields.
Record last
changed
Indicates the date on which the selected cardholder record was last modified and saved.
This date is updated only when cardholder information is changed, not when badge
information is changed. The last changed date is saved individually for each badge record as
well.
revision 1 41
42 revision 1
Comment
Visitor data
Displays the visitors information such as name, address and organization in these fields.
Last changed
Indicates the date on which the selected visitor record was last modified and saved.
This date is updated only when visitor information is changed, not when badge information is
changed. The last changed date is saved individually for each badge record as well.
revision 1 43
44 revision 1
Comment
Badge listing
window
revision 1 45
46 revision 1
Comment
Lists the badge ID and issue code (in parentheses) for the current active badge. If the Show
inactive badges checkbox is selected, the list includes both the active and the inactive
badge(s) assigned to the selected cardholder. Select a badge ID (issue code) from the list and
the corresponding access levels for that badge will be displayed in the Access levels display.
Show inactive
badges
When selected, the Show levels for badge ID (issue code) drop-down list will list both the
active and inactive badge(s) assigned to the selected cardholder.
Access levels
display
When the Show unassigned levels checkbox is selected, lists both access levels that have
been and that can be assigned to the selected cardholder/badge record. If the Show
unassigned levels checkbox is not selected, only access levels that have been assigned will be
listed. If they exist, also displays the access levels activation and deactivation dates.
Show unassigned
levels
When selected, the Access levels display lists both access levels that have been and that can
be assigned to the selected cardholder/badge record.
Number of levels
assigned
Displays the number of access levels that have been assigned to the selected cardholder/badge
record. For example: 6 levels assigned.
Note:
1.
In the Area Access Manager main window or the Access Level Assignment
Wizard: Select People window, select one or more records.
2.
Click .
3.
If multiple records were selected, use the arrows in the lower left corner
of the window to cycle through the records.
If only one record was selected, these arrows are not displayed.
The first tab may be either the Cardholder tab or the Visitor tab, depending
on the type of record(s) being displayed in the main window. If View >
revision 1 47
48 revision 1
Chapter 4:
Access Levels
What are access levels? An access level is one or more reader/timezone
combinations used to control hardware access by one or more cardholders.
Access levels can be assigned to active badges to define which readers a badge
has access to and at which times.
Types of access levels. OnGuard has two types of access levels: standard access
levels and temporary access levels. The difference between the two is that
temporary access levels have an activation and/or deactivation date, and standard
access levels do not.
Creating standard access levels. Standard access levels are created on the
Access Levels form in the Access Levels folder in System Administration. (To
display this form in System Administration, from the Access Control menu,
select Access Levels, then click on the Access Levels tab.)
Creating temporary access levels. Temporary access levels are created by
specifying an activation and/or deactivation date when assigning an access level.
Think of a temporary access level as an override for a standard access level. The
activation and/or deactivation date is applied to the selected active badge, not to
the whole access level.
Controlling what access levels can be managed by a user. The access levels
that can be managed by a user through Area Access Manager are configured on
the Area Access Manager Levels form in the Users folder in System
Administration. (To display this form in System Administration, from the
Administration menu, select Users, click on the Users tab, then click on the
Area Access Manager Levels sub-tab.) Only the access levels listed there for a
user will be available in Area Access Manager for the user to assign and remove
from cardholders active badges.
In a segmented system, any access levels that are configured as assignable by
users in other segments MUST be listedas access levels to manage if the user has
access for one of these segments.
What cardholders/visitors are shown. Only cardholders/visitors with active
badges (active status, with an activation date before or the same as the current
date and less than or the same as the deactivation date) will be shown when
viewing access level assignments or searching cardholders/visitors to assign
access levels to.
Viewing access levels assignments. The Area Access Manager main window
allows the user to switch between the access levels they have permission to
manage. When an access level is selected, the cardholders with this access level
will be shown in the list.
Segmentation. A user will only be able to assign and remove access levels from
cardholders who have active badges that are of a badge type that the user has
segment access to.
revision 1 49
4: Access Levels
50 revision 1
The system must be segmented and have the Allow access levels to be
configured as assignable by users in other segments feature enabled. For
more information, refer to the Segmentation appendix in the System
Administration User Guide.
The access levels must be selected as access levels to manage from the Area
Access Managers Levels sub-tab on the Users form in the Users folder in
System Administration.
have segment access to the segment that contains the levels that are
configured as assignable by users with access to other segments AND
be able to manage one of the access levels that belongs to this segment from
Area Access Manager.
revision 1 51
4: Access Levels
On the Area Access Manager main window in the Access level drop-down
listbox, select an access level to display. This listbox lists all access levels
that the currently logged in user has permission to manage.
2.
If the access level you selected has 5000 or more people assigned to it, a
message will ask you to confirm that you really wish to display that access
level.
Note:
Although the default Person Count Threshold value of 5000 works well for
most systems, it is possible to change it. For more information, refer to
Appendix D: Person Count Threshold Value on page 103.
3.
52 revision 1
1.
From the View menu, select Filter Bar. The Filter bar is then displayed in
the Area Access Manager main window.
2.
If you wish to display records with any activation date, deselect the date
checkbox in the Access level activation date field and proceed to step 4.
3.
If you wish to filter based on a specific access level activation date, select the
date checkbox in the Access level activation date field and then type a
numeric date into the field.
4.
If you wish to display records with any access level deactivation date,
deselect the date checkbox and proceed to step 5.
5.
In the Person search type field, select whether to include badge activation
dates when searching for people.
6.
Each time you modify the filter criteria in the Filter bar, the listing window is
automatically updated and displays only the records that meet the criteria.
The filter criteria are displayed in the status bar for your reference.
In the View menu, make sure that the Person Type (cardholder or visitor)
you wish to remove access levels from is selected.
2.
In the Access level drop-down list on the Area Access Manager main
window, select the access level you want to remove a cardholder or visitor
from.
3.
Note:
5.
revision 1 53
4: Access Levels
54 revision 1
1.
2.
The Access Level Assignment Wizard begins, and the Find People window
is displayed, as shown below:
3.
Specify the search criteria by typing a full or partial entry in the field(s) on
which you wish to search. For drop-down list fields, you can select the
desired value. Here are some examples:
Type Lake in the Last Name field to find all records of personnel who
have the last name Lake.
Type M in the Last Name field to find all records of personnel whose
last name begins with the letter M.
4.
You can also search based on access levels by clicking the Access Levels
tab.
a.
b.
Select the access level you would like the search to be based on.
5.
Click [Next].
6.
Depending on what you entered for the search criteria, the following may
occur:
a.
b.
c.
revision 1 55
4: Access Levels
Note:
56 revision 1
Optional - If you need to view more information about one or more records,
select the record(s) and then click [Personal Information]. The Personal
Information window opens. If multiple records were selected, use the arrows
in the lower left corner of the window to cycle through the records.
If only one record was selected, these arrows are not displayed.
The first tab may be either the Cardholder tab or the Visitor tab,
depending on the type of record(s) displayed in the Select People
window. If View > Person Type > Cardholders is selected, the
Cardholder tab is displayed. If View > Person Type > Visitors is
selected, the Visitor tab is displayed.
8.
9.
In the Select Access Levels window, select the access levels you want to
assign to the cardholder/visitor(s) you selected in the previous step. You
must choose one or more access levels to assign. The currently viewed
access level (on the Area Access Manager main window) is selected by
default.
The definition for an access level can be viewed by right-clicking on an
access level and selecting Level Definition from the right-click menu, or by
a.
Note:
revision 1 57
4: Access Levels
4) Click [OK].
10. Click [Next].
11. The Summary window is displayed, as shown. If you agree with the
summary of the access level assignments that you are about to made, click
[Finish].
12. If the access level(s) are successfully assigned, then a message similar to the
following is displayed. The access levels are assigned to the selected
cardholders/visitors active badges and the badges are then downloaded to
the appropriate panels.
58 revision 1
a.
For information about the failure, click [View Log] in the message. The
Bulk Access Level Action Results window opens and displays the log
file. For more information, refer to Appendix B: Bulk Access Level
Action Results Window on page 97. When you are finished viewing the
log, click [OK].
b.
Click [OK] to close the error message. You can view the log again at
any time by selecting Log File from the View menu.
Open the Access Level Activation Dates window from one of the two
following places:
a.
Main window
1) In the main window, select the record(s) you wish to assign
activation dates to. From the Edit menu, select Set Activation
Dates.
2) The Access Level Activation Dates window opens. The access
levels listed in the Assigned Access Levels listing window depend
on how the window was opened. In this case, only the currently
selected access level in the Access level drop-down list on the main
Area Access Manager window will be listed in the Assigned
Access Levels display of the Access Level Activation Dates
window since this is the access level that is currently selected. For
more information, refer to Appendix C: Access Level Activation
Dates Window on page 99.
b.
revision 1 59
4: Access Levels
3.
In the Activation Date section, either type a numeric date into the field, or
select a date from the drop-down calendar.
60 revision 1
and
navigation buttons.
Once you have selected a month and a year, click on the day that you
want the selected badge to activate on.
4.
In the Deactivation Date section, repeat step 3, choosing the date when you
want the selected badge to become invalid.
5.
6.
7.
Click [OK].
8.
9.
revision 1 61
4: Access Levels
62 revision 1
Chapter 5:
View Video
The View Video feature allows users managing an access level to view associated
live video. Multiple video windows from different cameras can be displayed at
the same time. The number of video windows displayed automatically can be
configured or the user may be allowed to select which cameras they wish to view
video for.
Permissions
There are two permissions associated with viewing video in Area Access
Manager.
View Video
To view live video in Area Access Manager, users must have the following
permission configured in System Administration: Monitor Permission Groups >
Monitor > View > Live Video.
Viewing Video
The View Video feature can be configured to allow the user to choose which
cameras to view or to automatically launch cameras when the total number
available for the currently selected access level is less than a specified number.
To view video for the currently selected access level, click the View Video
toolbar button.
revision 1 63
5: View Video
Selecting Cameras
If the number of cameras assigned to an access level is greater than the
Automatic Video View Count, the user will be prompted to select which cameras
to view. The reader and panel names are displayed for the selected camera.
64 revision 1
Chapter 6:
Reports
Reports can be printed or previewed in Area Access Manager by any Area
Access Manager user - no additional permissions are required. The reports that
are available in Area Access Manager are configurable via a report type in
System Administration. To be able to print or preview a report in Area Access
Manager, that report must be assigned the Area Access Manager report type in
System Administration.
There are two reports that have the Area Access Manager report type assigned
to them by default. Thus, the following reports are available by default in Area
Access Manager:
Report Name
Description
Access Level
Assignments to
Cardholders
Access Level
Assignments to
Cardholders By
Segment
Any other report that you want to be available in Area Access Manager must
have the Area Access Manager report type selected; any of the default reports
that you do not want to be available in Area Access Manager must have the have
the Area Access Manager report type deselected. For more information, refer
to Configure Which Reports are Available in Area Access Manager on page 66.
Reports run in Area Access Manager are filtered based on the access level(s)
assigned to the Area Access Manager user. This only applies to reports pertaining
to access levels, access groups, Area Access Manager user levels, or readers.
Important:
When a system is upgraded, the default report settings are set again. The
default reports mentioned previously become available again in Area Access
Manager, and any reports that were configured with the Area Access
Manager report type must be reconfigured to be available in Area Access
Manager.
revision 1 65
6: Reports
Reports Window
Reports Window
Form Element
Comment
Description
Report listing
window
Lists any reports available in Area Access Manager, which are configured in System
Preview
Close
Help
66 revision 1
2.
In the listing window, select the report that you want to become available in
Area Access Manager.
3.
Click [Modify].
4.
5.
Click [OK].
2.
In the listing window, select the report you wish to remove from Area
Access Manager.
3.
Click [Modify].
4.
5.
Click [OK].
2.
The Reports window opens. Select the report you wish to run.
3.
If you wish to print the report, click [Print]. The Print Report Options
window opens. For more information, refer to Chapter 7: Print Report
Options Window on page 69.
If you wish to preview the report, click [Preview]. The Report Print
Options window opens. For more information, refer to Chapter 8:
Report Print Preview Window on page 73.
revision 1 67
6: Reports
68 revision 1
Chapter 7:
This window is displayed by clicking the [Print] button in the Reports window.
revision 1 69
70 revision 1
Comment
Print Destination
Includes the Print to a Preview Window, Export Directly to a File and Print Directly to a
Printer radio buttons. Also includes the Printer drop-down list and the Prompt for Number
of Pages check box.
Print to a Preview
Window
If selected, the Report Print Preview window will be displayed when the [OK] button is
clicked. In the Report Print Preview window, you can view the selected report on the screen.
For more information, refer to Chapter 8: Report Print Preview Window on page 73.
Export Directly to
a File
If selected, the Export window will be displayed when the [OK] button is clicked. Choose the
report Format and Destination from the drop-down lists.
Depending on what you choose, enter the destination and format information in the
corresponding window, then click [OK].
Print Directly to a
Printer
Printer drop-down
list
Prompt for
Number of Pages
This field is enabled for selection only when the Print Directly to a Printer radio button is
selected.
If selected, the Print window will be displayed where you can select the print range, number of
copies and whether or not to collate your report.
Report Subtitle
Report Subtitle
textbox
Type the text here that will be displayed as the subtitle on the report.
OK
Cancel
Closes the Print Report Options window without printing the report.
Help
Print a Report
1.
2.
revision 1 71
3.
4.
Note:
72 revision 1
If the Linkage Server is running under a local system account it may not
have permission to access a network printer (depending on its
configuration). If this is the case you must select a local or default network
printer. Contact your System Administrator to determine what account the
Linkage Server is running under and the printers it can access.
5.
In the Report Subtitle section, type the report subtitle. The subtitle will be
displayed below the report title on the report.
6.
Click [OK]. The options selected in the Print Destination section will
determine where the report is sent.
Chapter 8:
revision 1 73
74 revision 1
Comment
Report navigation
tree
The display in the left portion of the Report Print Preview window. The report navigation tree
lists the records contained in the report, in a hierarchical arrangement.
The information is content-sensitive. The report type determines the entries in the tree.
For example, the default User Transaction Log report is arranged in date order, so the tree
will contain a list of dates. The tree for the default Text Instructions report lists alarms. The
Access and Denials, by Reader report has an entry for each queried reader, with subentries
by event date.
If the tree has branching entries, you can expand the branches of the tree. When you click an
entry in the tree, you move to that section or record in the report. When a section or record is
selected via the report navigation tree, that section or record will appear in the preview
window with a blue box border. For more information, refer to Preview and Print a Report on
page 76.
Preview window
The display in the right portion of the Report Print Preview window. The preview window
displays up to one full page of the report, depending upon the zoom level set. If a report
appears too large for the current window, either adjust the zoom level or use the up, down, left,
and right arrow keys to scroll and see the rest of that page of the report.
For reports that contain more than one page, use the arrows or the <Page Up>/<Page Down>
keys to navigate through the pages.
Click to displays a Print window from where you can select the page range and number of
copies to print, then initiate report printing.
Click to export the report to a file or to your organizations electronic mail system.
Click to toggle the display of the report navigation tree on or off.
Zoom
From this drop-down list, you can select the magnification level of the preview window
contents, with respect to the actual size. Choices include 400%, 300%, 200%, 150%, 100%,
75%, 50%, 25%, Page Width and Whole Page. Selecting either Page Width or Whole Page
displays the corresponding percentage in this field.
You can also type a number directly into this field, but you must then either press <Tab> or
click outside of the field for the number to take effect.
Click to move to the first page of the report.
Click to move to the previous page of the report. Another way to do this is to click the <Page
Up> key.
Page count
This display indicates the page number of the currently displayed page, followed by the total
page count for the report. For example: 2 of 4.
Click to move to the next page of the report. Another way to do this is to click the <Page
Down> key.
revision 1 75
Comment
Click to move to the last page of the report.
Click to terminate the report building process. This button is especially useful if the report is
lengthy and you want to view only part of it.
Click to display the Search window from where you can perform a text search of the report.
When you enter text in the Find what field (in the Search window) and click [Find Next], the
view jumps to the first occurrence of the requested text or a message is displayed if no match
was found.
Freeze Pane: Freezes the section of the pane so you continue to see the
information as you scroll.
2.
3.
The [Print] button, select the Print to a Preview Window radio button
and then click [OK].
76 revision 1
On the left, the report navigation tree may have branching entries.
If the tree has branching entries, expand that branch of the tree.
On the right, the preview window will show the first page of the report
as it will look when it is printed. Click a section or record in the preview
window. When a section or record is selected in the preview window,
that section or record will appear in the preview window with a blue box
border.
Click and drag the split bar to resize the report navigation tree and the
preview window relative to each other.
Click the
button to hide the report navigation tree and maximize
the space used for the preview window.
4.
Use the
,
,
and
buttons or the <Page Down>/<Page Up>
keys to view other pages of the report.
5.
Select an option from the zoom drop-down list to change the size of the
display. You can instead type a number directly into this field, but you must
then either press <Tab> or click outside of the field for the number to take
effect. If a report page is still too large for the window, you can use the up,
down, left, and right arrow keys to scroll and see the rest of the page.
6.
To save the report to a file on your computer or to send the report to someone
using your companys electronic mail system, select the
Export window is displayed.
7.
button. The
Select the format that you want to send the report in from the Format
drop-down list.
To print the report from within the Report Print Preview window:
a.
Click the
button. The Print window is displayed from where you
can select which pages to print and the number of copies.
b.
c.
The All radio button to print the entire report without user
intervention.
revision 1 77
2.
The Search window is displayed. In the Find what field, type the word,
contiguous words or number you wish to locate in the report.
Note:
4.
5.
78 revision 1
button.
If the requested information was found, click [Find Next] to move through
successive occurrences of it.
Appendix
Appendix A:
In the Area Access Manager main window, select the Edit menu, then the
Assign Access option.
This section contains screenshots of each of the windows in the Access Level
Assignment Wizard, as well as field tables that describe the function of each field
and button on each window.
A correctly selected record can be highlighted, but does not have to be. However,
a check mark must appear to the left of the entry. The following diagram
illustrates a correctly selected record:
revision 1 81
82 revision 1
Comment
Person type
Select the type of person to search for; choices include cardholders or visitors.
If you do not have permission to view either the cardholder or visitor person type, then that
person type will not be available for selection in this drop-down list.
To be able to select the Cardholder option, you must have permission to view cardholders.
(The Cardholder checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab must be selected.)
To be able to select the Visitor option, you must have permission to view visitors. (The Visitor
checkbox on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab must be selected.)
If you switch from one person type to another, the search user interface changes for the
appropriate person type.
If you are currently viewing one person type, launch the Access Level Assignment Wizard and
then assign access levels to the other person type, after the assignment operation has
completed, the main view is switched to the other person type. If the access level operation
failed for all people involved in the assignment operation then the view is not switched.
Select whether to include badge activation dates when searching for cardholders and visitors.
If Search for people with current badge activation dates is selected, then badges that have
the status Active and have activation and deactivation dates in the current date/time range
are searched up.
If Do not include badge activation dates when searching for people is selected, then all
badges that have the status Active are searched up, irregardless of their activation and
deactivation dates. This search option is useful in scenarios where there is a person who has
occasional access to a building, and the IT department enables and disables the badge
depending on when this person comes into the office.
Last name
First name
Middle name
Cardholder ID
Badge type
Selects which of the cardholders badges (if he or she has more than one) is to be the active
one.
Address
City
State
Zip code
Phone
Birth date
revision 1 83
Comment
Record last
changed
Indicates the date on which this cardholder record was last saved. This date is only updated
when cardholder information is changed, not when badge information is changed. The last
changed date is saved individually for each badge record as well.
Title
Department
Division
Location
Building
Floor
Office phone
Extension
Back
This button is grayed out because this is first window in the Access Level Assignment Wizard.
Next
Cancel
Exits the Access Level Assignment Wizard without assigning any access levels.
Help
84 revision 1
revision 1 85
Comment
Person type
Select the type of person to search for; choices include cardholders or visitors.
If you do not have permission to view either the cardholder or visitor person type, then that
person type will not be available for selection in this drop-down list.
To be able to select the Cardholder option, you must have permission to view cardholders.
(The Cardholder checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab must be selected.)
To be able to select the Visitor option, you must have permission to view visitors. (The Visitor
checkbox on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab must be selected.)
If you switch from one person type to another, the search user interface changes for the
appropriate person type.
If you are currently viewing one person type, launch the Access Level Assignment Wizard and
then assign access levels to the other person type, after the assignment operation has
completed, the main view is switched to the other person type. If the access level operation
failed for all people involved in the assignment operation then the view is not switched.
Select whether to include badge activation dates when searching for cardholders and visitors.
If Search for people with current badge activation dates is selected, then badges that have
the status Active and have activation and deactivation dates in the current date/time range
are searched up.
If Do not include badge activation dates when searching for people is selected, then all
badges that have the status Active are searched up, irregardless of their activation and
deactivation dates. This search option is useful in scenarios where there is a person who has
occasional access to a building, and the IT department enables and disables the badge
depending on when this person comes into the office.
Last name
First name
Middle name
Badge type
Selects which of the visitors badges (if he or she has more than one) is to be the active one
Organization
Title
Address
City
State
Zip code
Office phone
Extension
Indicates the extension at the office phone number specified where the visitor can be reached
86 revision 1
Comment
Last changed
Indicates the date on which this visitor record was last saved. This date is only updated when
visitor information is changed, not when badge information is changed. The last changed date
is saved individually for each badge record as well.
Back
This button is grayed out because this is first window in the Access Level Assignment Wizard.
Next
Cancel
Exits the Access Level Assignment Wizard without assigning any access levels.
Help
revision 1 87
88 revision 1
Comment
Person type
Select the type of person to search for; choices include cardholders or visitors.
If you do not have permission to view either the cardholder or visitor person type, then that
person type will not be available for selection in this drop-down list.
To be able to select the Cardholder option, you must have permission to view cardholders.
(The Cardholder checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab must be selected.)
To be able to select the Visitor option, you must have permission to view visitors. (The Visitor
checkbox on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab must be selected.)
If you switch from one person type to another, the search user interface changes for the
appropriate person type.
If you are currently viewing one person type, launch the Access Level Assignment Wizard and
then assign access levels to the other person type, after the assignment operation has
completed, the main view is switched to the other person type. If the access level operation
failed for all people involved in the assignment operation then the view is not switched.
Select whether to include badge activation dates when searching for cardholders and visitors.
If Search for people with current badge activation dates is selected, then badges that have
the status Active and have activation and deactivation dates in the current date/time range
are searched up.
If Do not include badge activation dates when searching for people is selected, then all
badges that have the status Active are searched up, irregardless of their activation and
deactivation dates. This search option is useful in scenarios where there is a person who has
occasional access to a building, and the IT department enables and disables the badge
depending on when this person comes into the office.
Last name
First name
Middle name
Badge type
Selects which of the cardholder/visitors badges (if he or she has more than one) is to be the
active one.
Search type
Access Levels
listing window
Back
This button is grayed out because this is first window in the Access Level Assignment Wizard.
Next
Cancel
Exits the Access Level Assignment Wizard without assigning any access levels.
Help
revision 1 89
90 revision 1
If only one cardholder/visitor matches the search criteria, the record that
matches the search criteria is selected by default in the Select People
window.
Comment
Select All
Clear All
listing window
The contents of the listing window changes depending on whether visitors or cardholders are
displayed. If cardholders are displayed (View > Person Type > Cardholders is selected), the
listing window functions as follows:
The Activate and Deactivate columns are always present, and represent the activation and
deactivation dates of the assigned access level for each cardholder/visitor or badge ID. If
Active Badges is not selected in the View menu, then the dates shown are the earliest
activation date and the latest deactivation date for all active badges assigned to the cardholder/
visitor.
If Active Badges is selected in the View menu, the listing window contains a Badge ID
column. In this view, the listing window lists multiple entries for each cardholder/visitor, one
for each active badge assigned to the cardholder/visitor.
Additional columns displayed are determined by the fields listed in the Selected Fields column
of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,
you might want to include Last Name, First Name, Middle Name, Extension, and Department.
These same columns are displayed on the Select People window.
To sort the listing windows contents by a particular column, click on the column heading.
Clicking the column heading toggles the sort order between lowest to highest and highest to
lowest.
To select all items in the listing window, click [Select All]. To deselect all items in the listing
window, click [Clear All].
If visitors are displayed instead of cardholders (View > Person Type > Visitors is selected),
the listing window functions the same way, with one exception:
The columns displayed are determined by the fields listed in the Selected Fields column of the
Visitor Search Results Lists form in the Cardholder Options folder. For example, you might
want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.
These same columns are displayed on the main Area Access Manager window.
Personal
Information
Displays cardholder/visitor, badge, and access level information for the selected cardholder/
visitor records. On the Area Access Manager window, selecting this button is the same as
selecting the View menu, then selecting Personal Information. This button is grayed out until
at least one cardholder/visitor record is selected. If you select multiple records, you can cycle
through them by clicking the arrows in the lower left corner of the Personal Information
window.
Back
Returns to the previous window in the Access Level Assignment Wizard. This button is grayed
out on the first window in the Access Level Assignment Wizard.
Next
Cancel
Exits the Access Level Assignment Wizard without assigning any access levels.
Help
revision 1 91
92 revision 1
set an activation and deactivation date for an access level that is assigned to
cardholders or visitors.
Comment
Set Activation
Dates
When an access level is selected and the [Set Activation Dates] button is clicked, the Access
Level Activation Dates window opens. Using this window, an activation and deactivation date
can be assigned for an access level that is assigned to cardholders or visitors.
Select All
Clear All
Access Levels
display
A list of access levels you can assign cardholders or visitors to. Click the icon to the left of the
access level listed to select that access level for assignment. Multiple access levels can be
selected.
The definition for an access level can be viewed by right-clicking on an access level and
selecting Level Definition from the right-click menu, or by double-clicking on an access level.
A small window will open that lists each reader and timezone that makes up the access level.
Back
Returns to the previous window in the Access Level Assignment Wizard. This button is grayed
out on the first window in the Access Level Assignment Wizard.
Next
Cancel
Exits the Access Level Assignment Wizard without assigning any access levels.
Help
revision 1 93
Summary Window
94 revision 1
Comment
Read-only list of cardholders or visitors who will receive the access levels specified in the
Access levels to assign display. By default, this list is sorted by last name.
If cardholders are displayed (View > Person Type > Cardholders is selected), this display
functions as follows:
The Activate and Deactivate columns are always present, and represent the activation and
deactivation dates of the assigned access level for each cardholder/visitor or badge ID. If
Active Badges is not selected in the View menu, then the dates shown are the earliest
activation date and the latest deactivation date for all active badges assigned to the cardholder/
visitor.
Additional columns displayed are determined by the fields listed in the Selected Fields column
of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,
you might want to include Last Name, First Name, Middle Name, Extension, and Department.
These same columns are displayed on theSelect People window and the Area Access Manager
main window.
To sort the listing windows contents by a particular column, click on the column heading.
Clicking the column heading toggles the sort order between lowest to highest and highest to
lowest.
If visitors are displayed instead of cardholders (View > Person Type > Visitors is selected),
the listing window functions the same way, with one exception:
The columns displayed are determined by the fields listed in the Selected Fields column of the
Visitor Search Results Lists form in the Cardholder Options folder. For example, you might
want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.
These same columns are displayed on theSelect People window and the Area Access Manager
main window.
To change which people access levels will be assigned to, use the [Back] button to return to the
Select People window.
Access levels to
assign
Read-only list of access levels that will be assigned to the cardholders or visitors listed in the
People who will be receiving access level assignments display.
To change which access levels will be assigned, click [Back] and return to the Select Access
Levels window.
Finish
Assigns the selected access levels to the selected cardholders or visitors. Upon finishing, the
access levels will be assigned to the selected cardholders or visitors active badges and the
badges will be downloaded to the appropriate panels.
Back
Returns to the previous window in the Access Level Assignment Wizard. This button is grayed
out on the first window in the Access Level Assignment Wizard.
Cancel
Exits the Access Level Assignment Wizard without assigning any access levels.
Help
revision 1 95
96 revision 1
Appendix B:
Note:
If viewing active badges and performing operations with active badges, this
log will only be written to if you select an active badge for more than one
cardholder. Selecting multiple badges for one cardholder will not get written
to this log.
To view the log simply select Log from the View menu (or navigate to it using Windows
Explorer). If no bulk operations have occurred yet and you select this menu option, an
error message will be displayed. The log file will not be created and written to until the
first bulk access level operation occurs within Area Access Manager.
A failure will be written to the log if:
badges are segmented and you try to assign an access level to a badge that
the current Area Access Manager user does not have segment access to.
you violate the system/segment hardware settings for the maximum access
level assignments allowed per badge including total, temporary, and
standard access level assignments.
revision 1 97
you violate the system/segment hardware settings for the maximum badge
number length.
Comment
Access Level
Action Results
listing window
If viewing active badges and performing operations with active badges, this log will
only be written to if you select an active badge for more than one cardholder.
Selecting multiple badges for one cardholder will not get written to this log.
If no bulk operations have occurred yet, an error message will be displayed when Log is
selected from the View menu. The log file will not be created and written to until the first bulk
access level operation occurs within Area Access Manager.
A failure will be written to the log if:
OK
98 revision 1
badges are segmented and you try to assign an access level to a badge that the current
Area Access Manager user does not have segment access to.
you violate the system/segment hardware settings for the maximum access level
assignments allowed per badge including total, temporary, and standard access level
assignments.
you violate the system/segment hardware settings for the maximum badge number
length.
Appendix C:
Selecting a record in the listing window of the main Area Access Manager
window, and then selecting Set Activation Dates from the Edit menu.
revision 1 99
Comment
Assigned Access
Levels display
The access levels listed in the Assigned Access Levels listing window depend on how the
window was opened:
Method 1: In the main window, select the record(s) you wish to assign activation dates to.
From the Edit menu, select Set Activation Dates. If the window was opened using this
method, then only the currently selected access level in the Access level drop-down list on the
main Area Access Manager window will be listed in the Assigned Access Levels display of
the Access Level Activation Dates window since this is the access level that is currently
selected.
Method 2: In the Access Level Assignment Wizard: Select Access Levels window, click [Set
Activation Dates]. If the window was opened using this method, whatever access levels were
selected in the Access Levels display on the Access Level Assignment Wizard: Select Access
Levels window will be listed in the Assigned Access Levels display of the Access Level
Activation Dates window.
Activation Date
If the access level should always be activated, then deselect the date checkbox.
If the access level should be activated on a specific date, then select the date checkbox and
click the arrow to the right of the date checkbox. A calendar will drop down, where you can
select the activation date.
By default the activation date begins at 12:00 am (midnight). You can change the time by
typing a new time or by using the up and down arrows to the right of the time field to scroll to
the time the access level should activate.
Deactivation Date
If the access level should never be deactivated, then deselect the date checkbox.
If the access level should be deactivated on a specific date, then select the date checkbox and
click the arrow to the right of the date checkbox. A calendar will drop down, where you can
select the deactivation date.
By default the deactivation date ends at 12:00 am (midnight). You can change the time by
typing a new time or by using the up and down arrows to the right of the time field to scroll to
the time the access level should deactivate.
Set Date/Time
Clear Date/Time
OK
100 revision 1
Comment
Cancel
Closes the Access Level Activation Dates window without changing the activation and/or
deactivation date for any access levels.
revision 1 101
102 revision 1
Appendix D:
If you are logging in, then the Access level drop-down will be expanded, and
you must select an access level to display.
If you are already logged in and are switching which access level is
displayed (using the Access level drop-down), then a warning message is
displayed if the access level you selected has 5000 or more records.
The Person Count Threshold is only used when you use the Access level dropdown. If you modify the records being displayed using some other method, such
as applying filters from the Filter bar, assigning/removing access levels, or
enabling/disabling viewing active badges, all records will be displayed.
Although the default person count threshold value of 5000 works well for most
systems, it is possible to change it to a higher or lower value should you need to.
This is done by adding the following ACS.INI file setting:
[AreaAccessManager]
PersonCountThreshold=5000
This setting is not in the ACS.INI file by default. If you wish to use a value other
than the default value of 5000, you must add this setting to the ACS.INI file and
set it to the value you wish to use. If you add or change this ACS.INI setting, you
must shut down and restart Area Access Manager in order for the changes to be
applied.
revision 1 103
104 revision 1
Appendix E:
Troubleshooting
This section describes the error messages you may encounter when working with
Area Access Manager and a list of actions that should be taken if the error
message is encountered.
Login-related Problems
The following error messages may be encountered when attempting to log into
Area Access Manager.
Check: Verify that a license with Area Access Manager support is installed on
the License Server. For more information, refer to Licensing Requirements on
page 10.
Incorrect Username/Password
Error message text: The username/password combination you have entered is
incorrect. Please make sure your username is correct and then retype your
password.
Check: Verify that the username and password you are attempting to enter are
correct. If you still receive an error, contact your system administrator to receive
a new username and password.
revision 1 105
E: Troubleshooting
106 revision 1
Verify that the field/page permission group assigned to the user account has
permission to view the cardholder fields. At least one of the following fields
must have Yes specified in the View column; only those with Yes will
be displayed in the cardholder search results list and in Area Access
Manager. However, the Activate and Deactivate fields will always appear in
Area Access Manager.
Cardholder Fields
Table
Field Name
Cardholder
Allowed Visitors
Cardholder
Asset Group
Cardholder
Cardholder ID
Cardholder
First Name
Cardholder
Last Name
Cardholder
Middle Name
Cardholder
Cardholder
Replication
User-Defined Cardholder
Address
User-Defined Cardholder
Birth Date
User-Defined Cardholder
City
User-Defined Cardholder
User-Defined Cardholder
Extension
revision 1 107
E: Troubleshooting
Table
Field Name
User-Defined Cardholder
Floor
User-Defined Cardholder
Office Phone
User-Defined Cardholder
Phone
User-Defined Cardholder
State
User-Defined Cardholder
Zip Code
Badge Type
Badge Type
Title
Title
Department
Department
Division
Division
Location
Location
Building
Building
Verify that the field/page permission group assigned to the user account has
permission to view the visitor fields. At least one of the following must have
Yes selected in the View column; only those with Yes will be displayed
in the visitor search results list and in Area Access Manager. However, the
Activate and Deactivate fields will always appear in Area Access Manager.
Visitor Fields
Note:
108 revision 1
Table
Field Name
Cardholder
First Name
Cardholder
Last Name
Cardholder
Middle Name
Cardholder
User-Defined Visitor
Visitor Address
User-Defined Visitor
Visitor City
User-Defined Visitor
Visitor Extension
User-Defined Visitor
User-Defined Visitor
Visitor Organization
User-Defined Visitor
Visitor State
User-Defined Visitor
Visitor Title
User-Defined Visitor
The Visitor First Name, Visitor Last Name, Visitor Middle Name, and
Visitor Last Changed fields from the Visitor Search Results list (in
Check:
Check:
Note:
revision 1 109
E: Troubleshooting
check box on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab is selected.
Report-related Problems
The following errors may be encountered when attempting to run reports in Area
Access Manager.
Check: Log into System Administration and configure the report(s) that you
wish to be available in Area Access Manager. For more information, refer to
Configure Which Reports are Available in Area Access Manager on page 66.
110 revision 1
Index
A
Cardholder form
field table ..................................................... 41
Cardholders
assign access levels...................................... 53
displaying in Area Access Manager main
window ................................................. 23
person type................................................... 23
remove access levels.................................... 53
shown........................................................... 49
Change
columns displayed on Area Access Manager
main window ........................................ 30
columns displayed on Select People
window ................................................. 30
user password .............................................. 13
Create
standard access levels .................................. 49
temporary access levels ............................... 49
Customize the Select People, Summary, and Area
Access Manager main windows .................. 30
Help menu........................................................... 34
Badge form
field table ..................................................... 45
Badges
multiple active ............................................. 50
view active ............................................ 23, 28
D
Disable strong password enforcement ................ 12
E
Edit menu............................................................
Enable strong password enforcement .................
Error messages....................................................
Exit the application .............................................
31
12
13
21
F
Filter
reports ..........................................................
Find People window ...........................................
Access Levels form overview......................
Cardholder form overview...........................
Visitor form overview .................................
65
82
88
82
85
I
Introduction........................................................... 9
L
Licensing requirements....................................... 10
In Use setting ............................................... 10
revision 1 111
Index
10
21
18
19
15
M
Main window ............................................... 23,
Menus
Application ..................................................
Edit...............................................................
Help..............................................................
View.............................................................
37
31
31
34
32
O
Overview
access levels................................................... 9
Area Access Manager .................................... 9
Area Access Manager main window ........... 23
Find People window - Access Levels form . 88
Find People window - Cardholders form..... 82
Find People window - Visitors form ........... 85
Select Access Levels window...................... 92
Select People window.................................. 90
Summary window........................................ 94
P
Password
enable/disable strong password
enforcement .......................................... 12
overview ...................................................... 11
standards ...................................................... 12
weak database warning ................................ 14
Permissions ......................................................... 10
view video.................................................... 63
Person Count Threshold...................... 21, 52, 103
Person type.......................................................... 33
cardholder .................................................... 23
visitor ........................................................... 23
Personal............................................................... 40
Print
report............................................................ 71
Print Report Options window ............................. 70
field table ..................................................... 71
R
Remove access levels from cardholders .............
Report Print Preview window.............................
field table .....................................................
procedures....................................................
Reports
112 revision 1
53
74
75
76
65
65
66
66
65
67
51
67
67
65
67
S
Search
report for specific information.....................
Segmentation ......................................................
access level assignment on a segmented
system ...................................................
allow access levels to be configured as
assignable by users in other segments ..
cardholder segmentation..............................
configure access levels as assignable by
users that have access to other
segments ...............................................
Reader Assignments to Cardholders report
on a segmented system .........................
Select Access Levels window.............................
Select Access Levels window overview.............
Select People window.........................................
Select People window overview .........................
Summary window ...............................................
Summary window overview ...............................
78
49
50
50
51
50
51
92
92
90
90
94
94
T
Temporary access levels ..................................... 49
Types of access levels......................................... 49
V
View
access level assignments..............................
active badges.................................. 28, 32,
menu ............................................................
video ............................................................
View Video .........................................................
automatic video view count .........................
permissions ..................................................
selecting cameras.........................................
window ........................................................
Visitor form field table .......................................
Visitors
assign access levels to..................................
51
50
32
63
63
64
63
64
64
43
53
23
23
53
53
50
W
Weak database password warning ...................... 14
Windows
Access Level Activation Dates.................... 99
Bulk Access Level Action Results .............. 97
Find People .................................................. 82
main ...................................................... 23, 37
Personal Information ................................... 47
Reports......................................................... 66
Select Access Levels.................................... 92
Select People................................................ 90
Summary...................................................... 94
Wizard................................................................. 81
revision 1 113