Users & Permissions
This page explains the OV20i's users and permissions system and how to configure different user profiles for controlled access to system functionalities.
Default System State
By default, the users and permissions system is disabled, and any user with network access has full access to the OV20i.
Factory Settings:
- Users & Permissions: Disabled
- Network Access: Full system access for anyone
- Authentication: Not required
Purpose & Benefits
The users and permissions settings are an essential part of any system involving multiple users. These settings allow you to control who can access certain parts of the system and what actions they can perform. By assigning different access levels to different users, you can ensure that each person has the appropriate level of permissions to carry out their tasks while keeping sensitive data secure. Using the users and permissions settings, you can ensure that each user has access only to the data they need, reducing the risk of data breaches and unauthorized access.
Three User Profiles
There are three possible users:
| User | Default Access Settings |
|---|---|
| Engineer | Full access to the OV20i software. |
| Operator | Can operate the camera only for the active recipe via the human-machine interface (HMI). |
| Supervisor | Can select the active recipe and operate the camera through the human-machine interface (HMI). |
Configuring Users and Permissions
To enable Users and Permissions, click Enable Account on one or all three user profiles, and then enter a password that will be used to log in with that profile.
Activation Process:
- Navigate to Users and Permissions settings
- Click Enable Account on desired user profiles
- Enter password for each enabled profile
- Save configuration
Customization Options
Users cannot change the default usernames or add additional user profiles, but they can edit the specific permissions for each user (for example, some users might want to allow the Supervisor profile to edit recipes in addition to the default permissions).
What You Can Do:
- ✅ Edit specific permissions for each user profile
- ✅ Modify default access settings per role
- ❌ Change default usernames
- ❌ Add additional user profiles
⚠️ Critical Security Warning
After enabling one or more user profiles, sign in using any profile with Edit Settings permissions enabled (by default, only the Engineer profile has this enabled). Then, disable all permissions for the Anybody profile. Otherwise, users intended to have restricted access may simply log out and gain full access to the OV20i software.
Essential Security Steps:
- Enable desired user profiles with passwords
- Sign in as Engineer (has Edit Settings permissions)
- Disable all permissions for the Anybody profile
- Verify restricted access is properly enforced
Why This Matters: Without disabling the "Anybody" profile, users can bypass restrictions by simply logging out, defeating the entire security system.