Managing Users

Axon Commander supports two types of Users: Commander Users and Active Directory Users.

Commander Users are users that are added, authenticated, and managed by the Axon Commander Administration application.

Active Directory Users are registered with the Axon Commander, but authentication takes place on an agency’s Active Directory Server. Any validation of an Active Directory User is always sent to the Active Directory Server. At no point in time does Axon Commander store Active Directory User passwords or other data contained in Active Directory. Active Directory users are added when the Active Directory Group they are part of is added to Axon Commander (see Adding a Group from Active Directory). Axon Commander Checkup is used to update Active Directory Users. Active Directory Users have their domain name appear before their user name in the user list.

This article provides information on adding and editing Commander users, forcing users to change their password, assigning users to groups, setting user Rights, and descriptions of user Rights. 

Adding a Commander User

1. Click Users in the Administration navigation pane.
   The list of Commander Users is shown. The first User in the list should be the default admin. 
2. Click Add at the bottom-right of the window. The User Properties dialog box opens. 
   
3. Enter the user’s information:
   
   • User ID: A unique ID for the user. This can be used as a Badge ID or Employee ID, etc. It accepts a string as an input.
   • Full Name: This is the user’s First Name, Middle Initial, and Last Name. This information in used for showing file ownership and is shown to the user in the upper right corner of Axon Commander Client after they log in to the system.
   • Username: A unique username for the user. It is entered by the user when logging in to Axon Commander Client and is used for device assignments.
   • E-mail: The user’s e-mail address.
   • New Password/Confirm Password: The password entered by the user when logging in to Axon Commander Client.
   • Enable User Account: This is selected by default. It can be cleared to disable the user’s account.
   • User must change password at next logon: When selected, the user must change their password the next time the user logs in to Axon Commander.
4. Click Apply to add the user.
   You can continue to assign the user to Groups and set User Rights or click Close to exit the User Properties dialog box.
   After the user is added, you must provide the user with their Username and Password so they can log in to Axon Commander Client.

Editing a Commander User

After Commander Users are added, they can be edited and managed by the Axon Commander Administration application.

1. Click Users in the Administration navigation pane.
   The list of Commander Users is shown.
2. Find and select the user you want to edit.
   You can use the Filter field at the bottom of the window to narrow the list of users shown in the list. You can enter User ID, Username, First Name, or Last Name information into the filter. 
3. Double-click on the user row. The User Properties dialog box for the selected user opens. 
4. Edit the user information as needed.
   

   Note: You can clear the Enable User Account checkbox to disable the user’s account, but keep the user information in the system.

5. Click Apply to save the changes.
   You can continue to assign the user to Groups and set User Rights or click Close to exit the User Properties dialog box.

Forcing a User to Change Passwords

You can force Commander Users to change their password the next time they log in to Axon Commander.

1. Click Users in the Administration navigation pane.
   The list of Commander Users is shown. 
2. Find and select the user you want to edit.
   You can use the Filter field at the bottom of the window to narrow the list of users shown in the list. You can enter User ID, Username, First Name, or Last Name information into the filter. 
3. Double-click on the user row. The User Properties dialog box for the selected user opens. 
4. Select the User must change password at next logon check box. 
5. Click Apply to save the changes.
   The user will be asked to change their password the next time they log in to Axon Commander.

Assigning a User to a Group

Users can be placed into groups that have a designated role within the system such as a group for detectives or administrators. Rights can be assigned at a group level and users in or added to the group inherit, much like in Microsoft Windows. For information about creating a group, see Group Management. 

1. Click the Groups tab in the User Properties dialog box,
   The Groups the user belongs to is shown in the list.
2. To add the user to a group:
   
   • Select the group from the menu near the bottom of the dialog box.
   • Click Add. The Group is added to the list.
   Repeat this step to add another Group.
3. To remove a user from a Group:
   
   • Click the group in the Groups
   • Click Remove. The Group is removed from the list.
   Repeat this step to remove another Group.
4. Click Apply to save all the group changes.
   You can continue to set User Rights or click Close to exit the User Properties dialog box.

Setting User Rights

All Users in Axon Commander, whether they are Commander Users or Active Directory registered users. have a set of assigned Rights. Rights allow users to perform certain actions in Axon Commander Client. User can inherit Rights by being assigned to Groups.

1. Click the Rights tab in the User Properties dialog box.
   
2. Select the checkboxes adjacent to the Rights you want to assign to the user.
   For more information about each Right, see User Rights Reference. 
3. Clear the checkboxes adjacent to the Rights you do not want to assign to the user. 
4. Click Apply to save the changes. 
5. Click Close to exit the User Properties dialog box.

Inheriting Rights from a Group

Users that are assigned to a Group inherit the Rights that are selected for that Group. For example, if the Group has the Burn DVDs Right selected, then all users assigned to that group will automatically have the Burn DVDs Right selected and that permission cannot be removed.

When viewing the Rights tab in the User Properties dialog box, Rights inherited from a group are shown by a green box inside the associated Right check box.

Note: If a user belongs to multiple Groups, the inherited Rights for all Groups are combined.

User Rights Reference

This section provides information about the different User Rights in Axon Commander Client and what it allows. In most cases, the right is self-explanatory.

• Assign tags to assets owned by others: Allows the user to add Tags to files owned by other users.
• Assign tags to assets owned by user: Allows the user to add Tags to files owned by the user.
• Assign tags to unowned assets: Allows the user to add Tags to files that are not owned by any user.
• Burn DVDs: Allows the user to use the Burn to DVD operation.
• Change File owners: Allows the user to change the file owner (Primary User and Secondary User) in the File Properties dialog box.
• Convert video Files to a standard media format: Allows users to use the Convert to standard media operation.
• Create and edit markers: Allows the user to create and edit markers for audio and video files in the player.
• Create Reports on file audit trails: Allows the user to use the Create Report operation.
• Create Reports on users and system activity: Allows the user to run detailed user and system activity reports Axon Commander Administration.
• Delete files: Allows the user to delete Files.
• Edit file titles and descriptions: Allows the user to edit file titles and descriptions from File Properties dialog box.
• Export Files: Allows the users to use the Export File operation.
• Import Files: Allows the user access to the Import section.
• Log in to ViewXL: Allows the user to sign in to the Axon View XL application for the Axon Fleet in-car system.
• Manage associations and destinations: Allows the user to manage and control Association rules and Destinations in Axon Commander Administration.
• Manage Cabinets, Folders, and Files: Allows the user to manage and control Folders and Cabinets in Axon Commander Administration.
• Manage device assignment: Allows the user to assign and unassign Axon Devices, such as cameras, in Axon Commander Administration and through the Axon Device Manager mobile app.
• Manage device configuration: Allows the user to define the camera settings for Axon body worn cameras.
• Manage security for assets that user is owner of: Provides the user with the ability allow or restrict other users from viewing assets they own. This allows users to control access to their own files from the asset Properties – Security tab without granting them the global Manage Cabinets, Folders, and Files right.
• Manage storage locations: Allows the user to manage and control Storage Locations in Axon Commander Administration.
• Manage system settings: Allows the user to manage and control System Settings in Axon Commander Administration.
• Manage the File Extension matrix: Allows the user to manage and control the File Extension Matrix in Axon Commander Administration.
• Manage the Tagging system: Allows the user to manage and control Tags in Axon Commander Administration.
• Manage the Update service and configurations: Allows the User to manage and control the Installation, Installation Groups, and Updates sections in Axon Commander Administration.
• Manage Users and User Groups: Allows the user to manage and control Users and Groups in Axon Commander Administration.
• Print images: Allows the user to send image files to a printer device.
• Remove tags from assets owned by others: Allows the user to remove Tags from files owned by other users.
• Remove tags from assets owned by user: Allows the user to remove Tags from files owned by the user.
• Remove tags from unowned assets: Allows the user to remove Tags from files that are not owned by any user.
• Reset security on assets and Folders: Allows the user to reset security on all Folders and Files within a Cabinet hierarchy.
• Send Files to Folders/Cabinets with the “Send to” feature enabled: Allows the user to use the Send To operation.
• Verify the File integrity of media Files: Allows the user to use the Verify File Integrity operation.
• View all Files: Allows the user to view any file, regardless of other restrictions.
• View asset tags: Allows the user to view the Tags associated with a file.
• View Files that my User Groups can access: Allows the user to see (search for and access) any file that their Groups have access to.
• View Files that you own: Allows the user to see (search for and access) files they own.
• View destinations of a File: Allows the user to view file destinations (files sent to and received from other Commander systems).