Home
Setup guide
Install and connect your Security Center SaaS application.
User management
Advanced user management
About advanced user settings
If the pre-configured roles don't meet the needs of a user or group, or if you want to override settings configured at the group level for individual users, you can customize their settings in Genetec™ Configuration.
About privileges
Privileges control which actions a user can perform in the partitions they have access to. Users are granted a basic set of privileges by the role they are assigned when their profile is created.

Pre-deployment guide
Review requirements, order, and activate your Security Center SaaS system.
Setup guide
Install and connect your Security Center SaaS application.
- Getting started
- User management
  - About users and roles
    Users represent individuals with access to the Security Center SaaS system. System administrators create user entities with pre-defined roles and configure their rights and privileges.
  - Adding users
    Before you can manage devices and users in Security Center SaaS, you must first add users and assign their user role.
  - About groups
    A group is an entity that defines a group of users who share common properties and privileges. Groups simplify user administration by having users inherit roles, privileges, and configuration settings from their parent group or groups.
  - Adding groups
    To regroup users and manage their privileges as one entity, you can create groups.
  - Changing your user password
    To enhance security, you can update your user password for Security Center SaaS.
  - Changing your multi-factor authentication settings
    To enhance security, you can enable multi-factor authentication (MFA) or modify your existing MFA settings for Security Center SaaS.
  - Advanced user management
    - About advanced user settings
      If the pre-configured roles don't meet the needs of a user or group, or if you want to override settings configured at the group level for individual users, you can customize their settings in Genetec™ Configuration.
      - Setting user levels
        To define which users get priority over the PTZ controls of cameras, you must set the user level of users and group.
      - About access rights
        Access rights define which parts of your system users or user groups have access to. Users are granted a basic set of access rights and privileges by the role they are assigned when their profile is created.
      - Granting access rights for partitions
        To provide users access to the entities contained in a partition, you must grant them access rights for that partition.
      - About privileges
        Privileges control which actions a user can perform in the partitions they have access to. Users are granted a basic set of privileges by the role they are assigned when their profile is created.
        About the Privilege troubleshooter
        The Privilege troubleshooter is a tool that helps you investigate the allocation of user privileges in your Security Center SaaS system, helping you verify user permissions and fix issues.
      - Assigning privileges to users
        If the privileges of a pre-configured role don't meet a user's needs, you can adjust their privileges in Genetec™ Configuration.
      - Configuring users sign-in settings
        To define how and when a user can sign in to Security Center SaaS applications, you must configure their sign-in settings in Genetec™ Configuration.
      - Configuring start-up tasks for users
        To select which tasks open automatically when a user signs in to Genetec™ Operation, you can configure their active tasks.
      - Adding hot actions for users
        To provide operators with quick access to specific actions from the notification tray or by using keyboard shortcuts, you can add a hot action to their operation settings.
      - Configuring user access to archived video
        To restrict a user's access to archived video beyond a specific time period, you can configure the limit archive viewing setting in Genetec™ Configuration.
      - Configuring video watermarking for users
        To add identifying text to live, playback, and exported video for specific users and user groups, you can configure their video watermark.
      - Setting a default map for users
        To display a specific map when users open the Maps task, set it as the system default map.
    - Understanding third-party authentication
      Third-party authentication uses a trusted, external identity provider to validate user credentials before granting access to one or more IT systems. The authentication process returns identifying information to authorize or deny access. You can also use SSO (single-sign on) to centralize user authentication across multiple systems.
    - Integrating your corporate identity provider with Security Center SaaS for SSO
      To enable single sign-on (SSO) for Security Center SaaS, GTAC must coordinate with your corporate identity provider to configure the integration.
    - About user provisioning
      User provisioning is the process of managing user accounts in your system using a corporate identity provider. By integrating your Security Center SaaS system with Microsoft Entra ID or Okta, you can automate this process to reduce ongoing support costs and force compliance with security policies.
    - Setting up automatic user provisioning
      To manage users in your system through a corporate identity provider, your account owner or administrator can configure automatic user provisioning in Security Center SaaS by integrating with Entra ID or Okta.
- Device management
- System automation
- Map design
User guide
Perform daily operations and monitor your facilities in the Security Center SaaS application.
Genetec ClearID
Set up and use ClearID in Security Center SaaS.
Federation
Set up and use Federation in Security Center SaaS.
Appliances
Install, configure, and use your cloud-managed appliances.
Troubleshooting
Get quick and easy access to troubleshooting content for Security Center SaaS.
Supported devices
Review the supported devices list.
Supported features
Review the supported features list.
Technical support
Learn how and where to find support to help you solve technical issues.
Glossary

About privileges

2026-09-09

Privileges control which actions a user can perform in the partitions they have access to. Users are granted a basic set of privileges by the role they are assigned when their profile is created.

Privilege inheritance rules

Privileges can be inherited from user groups, or replaced at the member (user or user group) level according to the following rules:

A privilege that is allowed at the group level can be denied at the member level.
A privilege that is denied at the group level is automatically denied at the member level.
A privilege that is undefined at the group level can be allowed or denied at the member level.
When a user is a member of multiple user groups, the user inherits the most restrictive privilege settings. This means that Deny overrules Allow, and Allow overrules Undefined.

Note:

The default role privileges cannot be modified.

Privilege exceptions for partitions

Along with the privileges defined by their role or parent group, users also have a set of privileges for every partition in which they are an authorized user.

Privileges granted or denied at the partition level are considered exceptions and replace the basic privileges. They can be different for each partition the user has access to.

Note:

Only Administrative and Action privileges, plus the privileges over public tasks, can be overwritten at the partition level.