CONNECT Photo ID Administrator
Application  | CONNECT  | 
Role  | Photo ID Admin  | 
Description  | Grants photo administrator privileges across CONNECT  | 
Objective
The Photo ID admin role is involved with the creation of credentials. The Role provides limited access to Identities and Configuration.
They can add new Identities and assign / manage their Credentials. They can also add / amend PIN and IDS Codes. If the system has been configured to only allow a specific role to handle PIN and IDS Codes (the field Manage Pin and IDS Codes via a separate User Role in Configuration > General has been set to ON) then they can only use this functionality if they are also assigned the role of PIN Code Manager and / or ‘IDS Code Manager as appropriate.
They can also manage the configuration for Access Requests, Badges, Credentials and Credential Requests and can assign Photo ID Technician roles.
Access
Dashboard  | My Audits  | Identities  | Uploads  | My Groups  | Reports  | Configuration  | ACRM  | Requests  | 
|---|---|---|---|---|---|---|---|---|
Limited Access  | No Access  | Limited Access  | No Access  | No Access  | No Access  | Limited Access  | No Access  | Limited Access  | 
Access Modifiers
Photo ID Admin is only able to view and add PIN Codes and IDS Codes if:
Configuration > General > Identity Credentials Pin > Enable credential pin management set to ON.
Configuration > General > IDS code > Enable IDS code set to ON.
Additionally, if Configuration > General > Manage Pin and IDS Codes via a separate User Role set to ON then Photo ID Admin can only view / add PIN Codes and IDS Codes if they have been assigned the additional roles of PIN Code Manager and IDS Code Manager.
Screens
Screen  | Functionality  | Access Rights (Yes = ✓ or No)  | Limitation  | 
|---|---|---|---|
Dashboard  | Unknown Card Holders Widget  | ✓  | Provided Widget has been added to a Dashboard that has been configured to be shared with Photo ID Admin.  | 
Dashboard  | Access and Credential Removal Widget  | ✓  | Provided Widget has been added to a Dashboard that has been configured to be shared with Photo ID Admin.  | 
Dashboard  | Unmanaged Access Groups Widget  | ✓  | Provided Widget has been added to a Dashboard that has been configured to be shared with Photo ID Admin.  | 
Dashboard  | Deleted ACR/ACRMs to Process  | ✓  | Provided Widget has been added to a Dashboard that has been configured to be shared with Photo ID Admin.  | 
Dashboard  | Current Audits  | ✓  | Provided Widget has been added to a Dashboard that has been configured to be shared with Photo ID Admin.  | 
Dashboard  | Access Management Mismatch  | ✓  | Provided Widget has been added to a Dashboard that has been configured to be shared with Photo ID Admin. Widget cannot be added until Restrict access groups by company in CONNECT > Configuration > General has been set to ON at least once.  | 
My Audits  | Current Audits  | No  | |
My Audits  | Past Audits  | No  | |
Identities  | Add New Identity  | ✓  | |
Identities  | View Identity Information  | ✓  | |
Identities  | Add Credentials button  | ✓  | |
Identities  | Grant Access button  | No  | |
Identities  | Grant Access in Bulk button  | No  | |
Identities  | Add Pin  | ✓  | Only if Configuration > General > Manage Pin and IDS Codes via a separate User Role set to OFF and Config > General > Identity Credentials Pin > Enable credential pin management set to ON.  | 
Identities  | View Pin  | ✓  | Only if Configuration > General > Manage Pin and IDS Codes via a separate User Role set to OFF and Config > General > Identity Credentials Pin > Enable credential pin management set to ON.  | 
Identity Information  | Add IDS code  | ✓  | Only if Configuration > General > Manage Pin and IDS Codes via a separate User Role set to OFF and Config > General > IDS code > Enable IDS code set to ON.  | 
Identity Information  | View IDS code  | ✓  | Only if Configuration > General > Manage Pin and IDS Codes via a separate User Role set to OFF and Config > General > IDS code > Enable IDS code set to ON.  | 
Identity Information  | Sync to PACS  | No  | User is, however, able to refresh the page.  | 
Identity Information  | View Credentials  | ✓  | |
Identity Information  | Add Credential  | ✓  | |
Identity Information  | Create Credential on the fly  | ✓  | |
Identity Information  | Edit credential  | ✓  | |
Identity Information  | Remove Credential  | ✓  | |
Identity Information  | Add Access  | No  | |
Identity Information  | Remove Access  | No  | |
Badge Creation  | New Badge  | ✓  | |
Badge Creation  | Previous Badges  | ✓  | |
Badge Creation  | Print Badges  | ✓  | |
Uploads  | Credential Assignment Uploads  | No  | |
My Groups  | View Identities  | No  | |
My Groups  | View Managers  | No  | |
My Groups  | View Readers  | No  | |
Reports  | Run Reports  | No  | |
Reports  | Saved Reports  | No  | |
Configuration  | Access Control  | No  | |
Configuration  | Access Groups  | No  | |
Configuration  | Access Requests  | ✓  | |
Configuration  | Audit  | No  | |
Configuration  | Badges  | ✓  | |
Configuration  | Credential  | ✓  | |
Configuration  | Credential Request  | ✓  | |
Configuration  | Dashboard  | No  | |
Configuration  | General  | No  | |
Configuration  | Notifications  | No  | |
Configuration  | Roles  | ✓  | Can only assign Photo ID Technician Role  | 
Configuration  | Wallet  | No  | |
Configuration  | Rules  | No  | |
ACRM  | Remove Access from ACRM  | No  | |
ACRM  | Transfer Access from ACRM  | No  | |
ACRM  | Add Access to ACR  | No  | |
ACRM  | Remove Access from ACR  | No  | |
ACRM  | Transfer Access from ACR  | No  | |
Requests  | Access  | ✓  | |
Requests  | My Access Request History  | ✓  | 
  | 
Requests  | Credentials  | ✓  | |
Requests  | Manage Access Requests  | No  | |
Requests  | Manage Credential Requests  | ✓  | 
Additional Access
Application  | Screen  | Functionality  | Access Rights (Yes = ✓ or No)  | Limitation  | 
|---|---|---|---|---|
IDM  | My Profile  | View Page  | ✓  | |
IDM  | My Profile  | Edit User Preference  | ✓  | Preferred Language and Page Size for List Views ONLY.  | 
IDM  | No Access  | No Access  | No  | Photo ID Admin has no access to IDM tab.  | 
GUEST  | No Access  | No Access  | No  | If GUEST > Configuration > System > Default User Role = None then no access granted. (Not authorized to access GUEST displayed).  | 
GUEST  | New Visit My Visits  | Schedule New Visits View Scheduled Visits  | ✓  | If GUEST > Configuration > System > Default User Role = Host or Host Delegate then access is the same as the configured Default User Role.  |