This document is a complete overview of each individual security Permission Group and the scope of the available permissions.
For the general overview of Security Roles visit:
Most Permissions Groups though not all generally have four basic permissions:
- Create: establish new content
- Read: view existing content
- Update: edit existing content
- Delete: remove existing content
TABLE OF CONTENTS
- Account
- Account Content Groups
- Account Messages
- Account Security Groups
- Agenda Admin
- Agenda Event
- Analytics
- Event
- Event Importer
- Event Tab Assets
- Event Tab Automation
- Event Tab Categories, Keywords, Location, and Technicians
- Event Tab General
- Event Transcription
- Manage Ads
- Manage Client Categories, Keyword, Location, and Technicians
- Manage Client Encoders
- Manage Client Channel Settings
- Manage Client Player Settings
- Manage Client Global Media
- Manage OTT
Account
https://controlcenter.invintusmedia.com/account
https://controlcenter.invintusmedia.com/securityGroups
This pertains to two domains of Account Data:
Billing Reports and API Keys
This is where you can see Reports for your current or past billing cycles as well as retrieve your API key if we've created one for you.
User Management
This pertains to User management. Though the permissions currently read like "Any Create" or "Any Reset Password" this is the same as the basic four permissions. For example: "Any Delete" here would be the same as "Delete" anywhere else.
Note:
Though the Users Page also provides access to the Secutiry Roles - or, Account Security Groups - tab for Administrators, that tab can be blocked.Account Content Groups
https://controlcenter.invintusmedia.com/contentGroups
This pertains to the Content Groups (tying Categories to Users thereby limiting what kinds of content they can see).
Account Messages
This is the button on the top of the Control Center reading "Messages" and provides a Modal for general Notifications for your Account including failing to Publish an Event or a Disconnected Encoder
This only has the "Read" permission
Account Security Groups
https://controlcenter.invintusmedia.com/securityGroups
This is where you establish the scope of your Secutiry Roles and assign Users to those Roles.
Agenda Admin
https://controlcenter.invintusmedia.com/agenda
This pertains to the Global Agenda Tags and Global Indexes that are used within the Event Agenda Logger
Agenda Event
https://controlcenter.invintusmedia.com/agenda?eventID=xyz
This is the view for Event Agenda Logging
Analytics
https://controlcenter.invintusmedia.com/analytics
This pertains to your Accounts analytics. It is an overview of analytics by date range and Categories.
There is a "Read" and an "Export" permission, the latter of which will allow users to Export your account's Analytics data as a PDF when selected.
Event
https://controlcenter.invintusmedia.com/events
The Events Listing view is the main view users will utilize and beyond the regular permissions, comprises other permissions of note.
Event Recording: Start, Pause, and Stop
Having these enabled will allow the User to record media on your event (assuming a live Encoder is assigned).
Update Source Encoder
This allows users to switch the Assigned encoder. An use-case for this could be that they may need to switch to a backup encoder if the designated one is offline or having issues.
Note: No one can change assigned encoders while an Event is live
Update Custom ID
Update Chat
For some Clients, moderated chat is a useful feature. Within the Chat modal you can establish Chat Moderators and find links to the Event Chat Admin Interface. If this is blocked the User will not be able to Read, Create, Update, or Delete Moderated Chat for any event.
Event Importer
https://controlcenter.invintusmedia.com/import
This pertains to the CSV importer to Batch-create events. The "Read" permission in this context refers to the ability for the user to View the page.
Event Tab Assets
https://controlcenter.invintusmedia.com/events
This tab contains all of the Event Media uploaded or recorded: Video Media as well as documents (images, PDFs, linked documents, etc)
Beyond the basic four action permissions there are three others that bear mentioning:
- Asset Publishing: This pertains to the ability to Publish or Unpublish media. Publishing Video on an event puts it into the archives and makes it viewable to the end-user via the Embedded Player
- Asset Set as Thumbnail: will change the designated thumbnail for the Video (both Published and Unpublished media allows this)
- Asset Download: Allows the Control Center user to download the raw Video Media
Event Tab Automation
https://controlcenter.invintusmedia.com/events
The Automation tab controls the rules for when an Event should automatically start recording (with the assumption that the Encoder assigned is online at that time.
This Permissions groups is limited to Read and Update.
Note:
Updating Automation rules could result in Events not starting on time. While there is no Delete permission, changing the automation rules to an incorrect time could invalidate - and by proxy - delete a portion of the recording.Event Tab Categories, Keywords, Location, and Technicians
https://controlcenter.invintusmedia.com/events
While each of these tabs have their own Permission Groups, their actions are the same: "Read" and "Update"
Beyond just viewing them, Event Categories, Keywords, Location, and Technicians can either be assigned or removed within these Event Tabs
Event Tab General
https://controlcenter.invintusmedia.com/events
The General tab consists of the Events core metadata:
- Title
- Start Date/Time
- Private settings (for the Embedded Channel Listings)
- Viewing Restrictions (discussed below)
- StreamText captioning (not associated with the default Captioning Service)
- Description
- Notes
While there are two basic Permissions (Read and Update) to this Tab, there is one that bears further explanation.
The "Update Domain Restrictions" permission correlates to the need for some Clients to cordon off playback of an Event from the public by restricting playback to a set domain of origin. For example: "your-county.your-state.gov".
Event Transcription
https://controlcenter.invintusmedia.com/events
The Event Transcription tab allows you establish VTT files that will become the captions to your Events. You can Read, Update, and Delete transcriptions here.
Note: Generating new Transcriptions incur cost to you as is relayed in the "Cost" widget.
The outlying permission "Transcription Use as Default" ensures that the AI-generated transcript is used as captions for the Event
Manage Ads
https://controlcenter.invintusmedia.com/manage/ads
Invintus affords you the ability to establish Ad Campaigns across All Events or Events by Category - injecting your Embedded Players with Pre-roll, Mid-roll, and Post-roll Ads.
Manage Client Categories, Keyword, Location, and Technicians
- https://controlcenter.invintusmedia.com/manage/categories
- https://controlcenter.invintusmedia.com/manage/keywords
- https://controlcenter.invintusmedia.com/manage/locations
- https://controlcenter.invintusmedia.com/manage/technicians
While each feature has it's own Management page and set of Permissions, they all have the four basic Permissions.
Note that this only applies to the routes above and not the elements viewable in their respective Event Tabs.
Manage Client Encoders
https://controlcenter.invintusmedia.com/manage/encoders
These are your Video Input Sources.
The Encoder's management pages allows Users to alter Stream Keys as well as change them from regular Source inputs to 24/7 source inputs (always on). It's therefore important that only your account's highest level of Administrators/Power Users have access. Changing one of these properties could corrupt an ongoing Live recording.
Manage Client Channel Settings
https://controlcenter.invintusmedia.com/manage/listing
This is your Embedded Channel Listings and contains the four basic Permissions.
If someone edits an Existing Listing it will be reflected in those Embed instances using the Listing on the next Page Refresh.
Manage Client Player Settings
https://controlcenter.invintusmedia.com/manage/player
This is where you generate Player Preferences for the Embedded Media Player and has the four basic Permissions.
Like the Channel Listings, any edits to existing Settings/Preferences will be reflected in each Embed instance using the Setting/Preference being Edited.
Manage Client Global Media
https://controlcenter.invintusmedia.com/manage/media
These are your Global assets. They are used in the following ways:
- Ad Campaigns
- Common Event media to be imported to Events as needed
- Embedded Player Settings as Slates/Interstitials
- Embedded Channel Listings as Default Event Image Icons (where necessary)
Manage OTT
https://controlcenter.invintusmedia.com/manage/ott
OTT - or Over-the-Top Media Services (e.g. Roku, Amazon Fire, etc.)
Generating new OTT configurations will always incur a $1000 dollar fee so it's important to only allow account Administrators to access this page.