How to Configure a Custom Level(Example for 2.6.3)

Below can be an example of how you can realize features that are changed in 2.4.0

Admin Item Settings and Admin Menu Settings can be properly configured to reflect the example above.

This user is an Assistant Manager, he can Edit or Read records for Device, Door, and Time and Attendance in order to manage his subordinate workers.
But he can only Read information of User, and cannot edit general Account Settings of the system as well as who has access to certain areas(Access Group).
You will be able to see in Step 7 when you set Custom Level, you can see how this can be implemented.

1. Because Max belong to IT Department, we can setup Access Group and Access Level via the Access Control menu.

2. When Creating Access Group, you will be prompted to create Access Level
- Assigning a user will not be necessary as we will assign a user to a specific user group, which will do it later on in this material.
- We will also create a Door Group in the next step, you can come back to this step later to assign a proper User Group for Access Group, and Door Group for Access Level

3. Let's go to the Door menu to setup Door Group, right-click on All Doors and click “Add Group” to add Door Group
- You can see the Door Group created below it, here it is named to IT Main Office A1.
- You can assign this door to the Access Group “IT Main Office A1” that we created previously

4. Now move on to Device Tab and just as we've done it, right-click on All Devices to click “Add Device Group”
- You can see the Device Group created below it, here it is named to BioStation L2(IT)

5. Click the device, and then assign its group to Device Group “BioStation L2(IT)” that we just created.

6. Let's go to Settings → Account → Add Custom Level

7. Here it will be named “IT Assistant Manager”, and we will set all of the Admin Item Settings that we created previously
- We will create a User Group in the next step, and then you can come back to this menu to assign the created User Group.
- This user will only have “Read” rights for all of the Admin Menu Settings

8. Finally, let's create a user by going to User menu
- Likewise, right-click on All Users and click “Add User Group”, here it is named “IT”

9. Add a new user and set the appropriate Group(User Group), Operator Level, and Access Group that we just created.
- set the Login ID and Password that you can remember well - at this point, you can go back to step 7 and assign the created custom level to the user group that this user has set
→ this will automatically set the user Max to be accounted for the custom level
- also try to enroll a fingerprint with one of your fingers for this user

*At this point please go back to step 2, to assign property User Group and Door Group that we created for the Access Group and the Access Level

10. Now when you log out and log in as Max, you can see that privilege of this user is limited
- below is the example of this user not being able to add any user on the User menu or edit Access Group, Monitoring, and Time Attendance menus
- but as it was mentioned earlier this user has rights to edit/read Device and Door

11. Now to test this, I will create a user named Kantakana, who is an IT Specialist working under Max in the IT Department that also belongs to the User Group of “IT.”
This user will have an operator level of just “User” which is set by default that is only able to read his own information as well as his own Time Attendance records.
- to do this please log out of Max's account, and then log back in as the default administrator(User ID = 1).
- go to the User menu and click “Add User” and then create a user as below.
- try enrolling the fingerprint of this user with your device using one of your fingers.

12. Now log out and log back in as Max, then go to Monitoring menu → Real-time log. Put the finger that you enrolled for Kantakana on the device. You will be able to see that Max can monitor when his associate employee Kantakana showed up to work by looking at when he authenticated. When you authenticate the fingerprint enrolled for Max on the device, you can also see that Max has the privilege to monitor his own logs.

13. In contrast, when you log in as Kantakana. You can see that he can only Read his own User information as well as his Time Attendance records, but he cannot edit anything on it as his privilege is limited.

- thus if he wants to view his own monitoring records as well as to fix them in case if he comes to work late or goes for a leave, or the system is down so that it failed to record his attendance properly, he has to contact his manager Max to edit this information.