For users who can log in to the system, assigning roles determines the level of permissions that users have. The system has default roles that can be assigned. Additionally, custom roles can be created and assigned as needed.
The following default roles are available:
Default roles cannot be edited or deleted.
Administrator
The administrator role has all permissions in the system enabled.
This role can:
Manage Credentials - Can view people and edit their credentials, but not inherently able to edit their personal data, add people, or change their access assignments.
Manage Reports - Can view, edit, create, and download reports (not including audit reports). Reports include data about people, events, and system activity.
Manage People and Access - Can view, add, remove, and edit person records, as well as manage spaces, people groups, elevators, and floors to control access throughout the system.
Configure Devices - Can view, manage, and configure devices, card formats, and controller rules, as well as execute device commands and controller rules.
Manage Guest Passes - Can view, add, remove, and edit guest passes.
Configure System - Can view and manage high-importance system options such as roles, integrations, automations, controller rules, email rules, threat levels, plus holidays and schedules. Includes ability to view events, people, devices, spaces, video, and more.
Monitor Events and Video - Can view and respond to events. Includes ability to view people, devices, spaces, video, and more. Also able to view and execute (but not edit) controller rules, device commands, lockdowns, and threat levels.
Manage Audit Reports - Can view and run audit reports.
Operator
The operator role is primarily for managing the facility. Operators can view personally identifiable information.
This role can:
Manage Credentials - Can view people and edit their credentials, but not inherently able to edit their personal data, add people, or change their access assignments.
Manage People and Access - Can view, add, remove, and edit person records, as well as manage spaces, people groups, elevators, and floors to control access throughout the system.
Configure Devices - Can view, manage, and configure devices, card formats, and controller rules, as well as execute device commands and controller rules.
Manage Guest Passes - Can view, add, remove, and edit guest passes.
Monitor Events and Video - Can view and respond to events. Includes ability to view people, devices, spaces, video, and more. Also able to view and execute (but not edit) controller rules, device commands, lockdowns, and threat levels.
This role cannot:
Manage Reports
Configure System
Manage Audit Reports
Installer
The installer role is primarily for technicians setting up the hardware and the system. Installers cannot view personally identifiable information.
This role can:
Configure Devices - Can view, manage, and configure devices, card formats, and controller rules, as well as execute device commands and controller rules.
This role cannot:
Manage Credentials
Manage Reports
Manage People and Access
Manage Guest Passes
Configure System
Monitor Events and Video
Manage Audit Reports
Monitor
The monitor role is primarily for overseeing the security of the facility. Monitors can view personally identifiable information.
This role can:
Monitor Events and Video - Can view and respond to events. Includes ability to view people, devices, spaces, video, and more. Also able to view and execute (but not edit) controller rules, device commands, lockdowns, and threat levels.
This role cannot:
Manage Credentials
Manage Reports
Manage People and Access
Configure Devices
Manage Guest Passes
Configure System
Manage Audit Reports
Auditor
The auditor role is primarily for viewing and running audit reports. Auditors cannot view personally identifiable information.
This role can:
Manage Audit Reports - Can view and run audit reports.
This role cannot:
Manage Credentials
Manage Reports
Manage People and Access
Configure Devices
Manage Guest Passes
Configure System
Monitor Events and Video
Related Information
© 2026 Honeywell International Inc. All Rights Reserved.