Professional Documents
Culture Documents
Area Access Manager User Guide: Perpetual Innovation
Area Access Manager User Guide: Perpetual Innovation
User Guide
PERPETUAL INNOVATION
Lenel OnGuard® 2010 Area Access Manager User Guide, product version 6.4
This guide is part 2 of a 2-document suite, item number DOC-800, revision 1.015, April
2010
Copyright © 1995-2010 Lenel Systems International, Inc. Information in this document is subject
to change without notice. No part of this document may be reproduced or transmitted in any form
or by any means, electronic or mechanical, for any purpose, without the express written
permission of Lenel Systems International, Inc.
Non-English versions of Lenel documents are offered as a service to our global audiences. We
have attempted to provide an accurate translation of the text, but the official text is the English
text, and any differences in the translation are not binding and have no legal effect.
The software described in this document is furnished under a license agreement and may only be
used in accordance with the terms of that agreement. Lenel and OnGuard are registered trademarks
of Lenel Systems International, Inc.
Microsoft, Windows, Windows Server, and Windows Vista are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries. Integral and
FlashPoint are trademarks of Integral Technologies, Inc. Crystal Reports for Windows is a
trademark of Crystal Computer Services, Inc. Oracle is a registered trademark of Oracle
Corporation. Other product names mentioned in this User Guide may be trademarks or registered
trademarks of their respective companies and are hereby acknowledged.
Portions of this product were created using LEADTOOLS © 1991-2010 LEAD Technologies, Inc.
ALL RIGHTS RESERVED.
OnGuard includes ImageStream® Graphic Filters. Copyright © 1991-2010 Inso Corporation. All
rights reserved. ImageStream Graphic Filters and ImageStream are registered trademarks of Inso
Corporation.
Area Access Manager User Guide
Table of Contents
Permissions ..................................................................................................................... 10
Passwords ....................................................................................................................... 11
Accounts ......................................................................................................................... 14
Log In .............................................................................................................................. 15
revision 1 — 3
Table of Contents
Customize the Select People, Summary, and Area Access Manager Main
Windows ..................................................................................................... 30
Menus ........................................................................................................... 31
Permissions ................................................................................................... 63
4 — revision 1
Area Access Manager User Guide
Appendix ...........................................................................79
revision 1 — 5
Table of Contents
6 — revision 1
Area Access Manager User Guide
No Permission to View Fields in Search Results Lists and Visitors .............................. 109
No Permission to View Fields in Search Results Lists and Cardholders ...................... 109
Incorrect Reports Available in Area Access Manager After Upgrade ........................... 110
Index ...............................................................................................111
revision 1 — 7
Table of Contents
8 — revision 1
Area Access Manager User Guide
Chapter 1: Introduction
Area Access Manager users can assign, modify, or remove access levels for
active badges. This effectively grants or restricts a cardholder or visitor’s access
to readers that control specific areas. An Area Access Manager user has control
over specific access levels that are assigned in System Administration. Area
Access Manager can be used to:
revision 1 — 9
1: Introduction
Getting Started
Licensing Requirements
To use Area Access Manager, you must have purchased the Area Access
Manager. In the Access Control section of your OnGuard® license, the following
will be listed:
Permissions
Permissions are set in System Administration or ID CredentialCenter. In order to
log into Area Access Manager, a user must have the following permissions:
1. The user must have permission to use the Area Access Manager application.
2. The user must have one or more access levels to manage.
3. The user must have permission to view access level assignments.
Note: If the user has permission to view access level assignments but not modify
them, then the user can log into Area Access Manager, but cannot assign,
remove, or modify access level activation dates.
4. The user must have permission to view either cardholders OR visitors. The
user must have permission to view at least one of these.
5. The user must have permission to view at least one of the cardholder search
results list fields OR at least one of the visitor search results list fields.
Use Area Access Select the Area Access Manager checkbox on the Administration > Users > System
Manager Permission Groups form > Software Options sub-tab.
At least one access The access levels that can be managed by a user through Area Access Manager are configured
level to manage on the Area Access Manager Levels form in the Users folder in System Administration. (To
display this form in System Administration, from the Administration menu, select Users,
click on the Users tab, then click on the Area Access Manager Levels sub-tab.
View access level Select the Access level assignments checkbox on the Administration > Users > Cardholder
assignments Permission Groups form > Badge sub-tab.
10 — revision 1
Area Access Manager User Guide
Modify access Select the Access level assignments and Modify checkboxes on the Administration > Users
level assignments > Cardholder Permission Groups form > Badge sub-tab.
View Cardholders Select the Cardholder checkbox on the Administration > Users > Cardholder Permission
Groups form > Cardholder sub-tab.
View permission To view the cardholder search results list, select Administration > Cardholder Options >
for at least one of Cardholder Search Results Lists form.
the cardholder
fields in the To view the permissions for the fields in the cardholder search results list, select
cardholder search Administration > Users > Field/Page Permission Groups form. You should add a permission
results list group for Area Access Manager users with the necessary cardholder permissions set to “Yes”.
(For more information, refer to “Add a Field/Viewing Permission Group” in the System
Administration User Guide.)
For example, if Last Name is listed in the Selected Fields listing window on the Cardholder
Search Results Lists form, the View permission for the Cardholder Table/Last Name Field
entry on the Field/Page Permission Groups form should be set to “Yes”.
View Visitors Select the Visitor checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab.
View permission To view the visitor search results list, select Administration > Cardholder Options > Visitor
for at least one of Search Results Lists form.
the visitor fields in
the visitor search To view the permissions for the fields in the visitor search results list, select Administration >
results list Users > Field/Page Permission Groups form. You should add a permission group for Area
Access Manager users with the necessary visitor permissions set to “Yes”. (For more
information, refer to “Add a Field/Viewing Permission Group” in the System Administration
User Guide.)
For example, if Organization is listed in the Selected Fields listing window on the Visitor
Search Results Lists form, the View permission for the User-Defined Visitor Table/Visitor
Organization Field entry on the Field/Page Permission Groups form should be set to “Yes”.
The system-wide report permissions are not enforced because Area Access
Manager only contains reports that are specific to data that is available within
Area Access Manager. This means that any Area Access Manager user can run
reports in Area Access Manager.
Passwords
OnGuard® includes strong password enforcement, which checks the user’s
password against password standards. This functionality is designed to enhance
password security if single sign-on is not used. If single sign-on is used
revision 1 — 11
1: Introduction
(automatic or manual), OnGuard does not enforce password standards. For more
information on single sign-on, refer to Single Sign-On on page 16.
The system’s strong password enforcement also checks the Lenel database user’s
password when logging into applications. Database user passwords apply only to
Oracle and SQL databases. For information on changing your database password,
refer to the Accounts and Passwords chapter in the Installation Guide.
Password Standards
Notes: For Oracle databases the following account username and passwords are not
allowed to be used together:
System and Manager
Internal and Oracle
Sys and Change_On_Install
12 — revision 1
Area Access Manager User Guide
Note: If you disable the option to enforce strong passwords, you will continue to
receive a message stating your password is weak every time you log into an
application until you change your OnGuard password to meet the password
standards.
5. Click [OK].
Note: If you get a weak password message the next time you log into the
application, carefully read the message. It may be telling you that your
database password is weak and not your user password. To change your
database password, refer to the Accounts and Passwords chapter in the
Installation Guide.
Error Messages
Read weak password messages/warnings carefully to avoid confusion about
whether your user password or database password is weak.
If you have a weak database password you will receive a warning every time you
log into any application, until you change your database password. Although it is
not recommended, you can acknowledge the warning and continue working in
the application. This table describes the password-related error messages that
may be generated and which password you need to correct.
• To correct the database password, refer to the Accounts and Passwords
chapter in the Installation Guide.
• To correct the user password, select a password that meets the standards
specified in Password Standards on page 12.
revision 1 — 13
1: Introduction
User password violations: Passwords cannot be the same as the user User
name.
Accounts
Anyone who wishes to use OnGuard applications must enter a user name and
password in order to access the software. The System Administrator should
create a unique account for each user of the applications. The System
Administrator can also, for each user, create a list of permissions, which specifies
precisely which screens, fields, and buttons the user can access.
During initial installation of the application, default accounts are created. These
include:
sa sa system account
admin sample
user sample
badge sample
These are provided as samples. You may change the passwords and use the
accounts, or remove them. The exception to this is the system account, SA. By
definition this account has permission to do anything in the system. A user with
system access has unlimited access to the application. You cannot delete or
change the system account except to modify the password, which you are
strongly encouraged to do as soon as possible to discourage unauthorized use.
The first time you log into OnGuard to configure the application, you should log
in as SA and your password should be SA.
14 — revision 1
Area Access Manager User Guide
Log In
This procedure describes how to log in without using single sign-on. For a
description of single sign-on, refer to Single Sign-On on page 16. To log in using
single sign-on, refer to Configure Single Sign-On on page 17.
1. Click the Start button, then select Programs > OnGuard 2010 > Area
Access Manager.
2. Your system may be configured to prompt you to select a database to log
into. If it is not, proceed to the next step. If it is:
a. In the Database drop-down, all ODBC system databases currently
defined on your computer are listed. Select the database that you wish to
use for your application.
b. Click [OK].
3. The Log On window displays.
a. In the User name field, type the user name assigned to you. When
logging in for the first time, your user name is SA.
b. In the Password field, type the password assigned to you. When
logging in for the first time, your password is SA. Note that the
characters you type do not appear in the field. Instead, for each character
you type, an “*” displays. This is intended to protect against
unauthorized access in the event that someone else can see the screen
while you type.
Important: After logging in for the first time, you are strongly encouraged to modify the
password for the system account as soon as possible to discourage
unauthorized use.
c. In the Directory field, select the directory that you wish to log into. For
user accounts not using single sign-on, the default is “<Internal>.”
d. Select the Remember user name and directory checkbox if you want
the values you just entered in the User name and Directory fields to
automatically be selected the next time that you log in.
e. Click [OK].
4. Your system may be configured to prompt you to confirm that you are
authorized to use the application. To accept the terms of the authorization
warning click [Yes].
revision 1 — 15
1: Introduction
Single Sign-On
Single sign-on simply means logging into OnGuard with the same user name and
password that you use to log into Windows or logging into OnGuard using an
LDAP user name and password for authentication. LDAP (Lightweight Directory
Access Protocol) is a software protocol that enables you to locate businesses,
people, files, and devices without knowing the domain name (network address).
Single sign-on allows scripts using the DataConduIT API to authenticate. These
scripts will be run under a Windows account. The account that is making the call
to the API can be obtained easily this way, and the script can be restricted to
those actions that the user is permitted to perform (using standard OnGuard
permissions).
Note: The use of the explicit username and password for directory authentication
to Windows is strongly discouraged. It is recommended that you do not store
Windows passwords in the OnGuard system, since OnGuard uses reversible
encryption and Windows does not. If explicit authentication is required, you
should use an account that has view only permission to the directory in
question.
Important: Allowing a user to log on in multiple ways increases the probability that the
user's access to the system could be compromised. It is recommended that
you standardize on either internal or directory accounts, but not both.
There are cases where assigning both an internal account and a directory account
to a user may make sense. In a system where directory accounts are
predominantly used, you may also assign an internal account to a user who needs
to access the system from locations where the directory service is unavailable. If
internal accounts are predominantly used, you may want to assign a directory
account to a user so that the user does not need to enter in a password to log on.
Directory Accounts
To log into OnGuard using single sign-on, a user name, password, and directory
are required. A directory is a database of network resources, such as printers,
software applications, databases, and users. The following directories are
supported by OnGuard: Microsoft Active Directory, Microsoft Windows NT 4
Domain, Microsoft Windows Local Accounts, and LDAP.
16 — revision 1
Area Access Manager User Guide
For example, with automatic single sign-on, users simply start OnGuard and they
are automatically logged in under their Windows account and directory.
With manual single sign-on, users must manually enter their Windows or LDAP
account information (user name and password). Users also have the option of
selecting a different configured directory.
If single sign-on is not used, users manually enter a user name and a password
that is different from their Windows or LDAP password. The directory is hard-
coded to refer to the internal OnGuard user directory.
Notes: Manual single sign-on can be used with the following directories: Microsoft
Active Directory, Microsoft Windows NT 4 Domain, and LDAP.
Automatic single sign-on can be used with every directory supported by
OnGuard except LDAP because it doesn’t provide all the account
information required.
revision 1 — 17
1: Introduction
Notes: For more information, refer to “Add a Directory” in the Directories folder
chapter of the System Administration or ID CredentialCenter User Guide.
For more information, refer to “Link a User Account to a Directory
Account” in the Users folder chapter of the System Administration or ID
CredentialCenter User Guide.
1. Click the Start button, then select Programs > OnGuard 2010 > Area
Access Manager.
2. Your system may be configured to prompt you to select a database to log
into. If it is not, proceed to step 3. If it is:
a. In the Database drop-down, all ODBC system databases currently
defined on your computer are listed. Select the database that you wish to
use for your application.
b. Click [OK].
3. If your Windows account is linked to a user, a message will be displayed that
says, “Attempting to automatically log you on using your Windows account.
To bypass this, hold down SHIFT.” To automatically be logged in, do
nothing.
4. Your system may be configured to prompt you to confirm that you are
authorized to use the application. To accept the terms of the authorization
warning, click [Yes].
18 — revision 1
Area Access Manager User Guide
1. Click the Start button, then select Programs > OnGuard 2010 > Area
Access Manager.
2. Your system may be configured to prompt you to select a database to log
into. If it is not, proceed to step 3. If it is:
a. In the Database drop-down, all ODBC system databases currently
defined on your computer are listed. Select the database that you wish to
use for your application.
b. Click [OK].
3. If your Windows account is linked to a user, a message will be displayed that
says, “Attempting to automatically log you on using your Windows account.
To bypass this, hold down SHIFT.”
To manually login or to login using a different user name and password, hold
down the <Shift> key. The Log On window opens.
a. In the Directory field, select the directory that you wish to log into. The
default is “<Internal>.”
b. In the User name field, type the Windows user name assigned to you.
Do not enter the domain\user name just enter your user name.
c. In the Password field, type the Windows password assigned to you.
d. Select the Remember user name and directory checkbox if you want
the values you just entered in the User name and Directory fields to
automatically be selected the next time that you log in.
e. Click [OK].
4. Your system may be configured to prompt you to confirm that you are
authorized to use the application. To accept the terms of the authorization
warning, click [Yes].
5. If segmentation is not enabled, skip this step. If segmentation is enabled:
a. The Select Segment window opens. Select the segment you wish to log
into.
b. Click [OK].
Troubleshoot Logging In
If you attempted to log in and were unable to do so, make sure that the following
conditions have been met:
• You entered a correct user name/password and specified the correct
directory.
• If your system is configured to display an authorization warning, you
accepted the terms.
revision 1 — 19
1: Introduction
However, using both types of accounts means that you need to manage the
internal account user names and passwords in addition to managing the directory
accounts. Allowing a user to log on in multiple ways increases the probability
that the user's access could be compromised. For that reason, it is recommended
that you standardize on either internal or directory accounts, but not both.
There are cases where assigning both an internal account and a directory account
to a user may make sense. In a system where directory accounts are
predominantly used, you may also assign an internal account to a user who needs
to access the system from locations where the directory service is unavailable. If
internal accounts are predominantly used, you may want to assign a directory
account to a user for that user's convenience, so that the user does not need to
enter in a password to log on.
20 — revision 1
Area Access Manager User Guide
• If there is only one access level to work with, that access level will always be
selected by default regardless of how many people are assigned to that
access level.
• If you have multiple access levels to work with and the first access level in
the Access level drop-down will return less than 5000 people, then the first
access level will be selected by default.
• If the first access level would return 5000 or more people, no access level
will be loaded by default. Instead, the Access level listing window will be
expanded, and you can choose which access level to load.
Note: Although the default Person Count Threshold value of 5000 works well for
most systems, it is possible to change it. For more information, refer to
Appendix D: Person Count Threshold Value on page 103.
revision 1 — 21
1: Introduction
22 — revision 1
Area Access Manager User Guide
You can use the Area Access Manager main window to do the following:
• Display cardholders or visitors assigned to a selected access level
• Display personal information about selected cardholders or visitors
• Allow cardholders and visitors to be assigned to access levels
• Allow cardholders and visitors to be removed from access levels
• Display all active badge IDs for cardholders or visitors
The Area Access Manager main window can display two different types of
records: cardholder and visitor. Only one type of record can be displayed at a
time. When the View > Person Type > Cardholders option is selected, the Area
Access Manager main window displays cardholders, as shown:
When the View > Person Type > Visitors option is selected, the Area Access
Manager main window displays visitors, as shown:
When the Active Badges option is selected in the View menu, the Area Access
Manager main window also contains a Badge ID column. In this view, the listing
window lists multiple entries for each cardholder/visitor, one for each active
badge assigned to the cardholder/visitor. For example, if Scott Johnson has two
active badges, 13 and 14, then he will be listed twice.
revision 1 — 23
2: Main Window
When you right-click on a record in the listing window in the Area Access
Manager, a menu is displayed. For more information, refer to Main Window
Right-click Menu on page 34.
Title bar The area at the top of the window that displays the window’s name. In the main window, the
title bar contains the name of the application, the name of the ODBC, and the name of the user
account that is currently logged in.
Menu bar A horizontal list of options that appears at the top of the main window. Each option has a pull-
down menu.
Access level Lists the access levels that can be assigned and removed from a cardholder or visitor’s active
badges.
• Access levels are created on the Access Levels form in the Access Levels folder in
System Administration. (To display this form in System Administration, select the
Access Control menu, then select the Access Levels option.) Only the access levels
listed there for a user will be available in Area Access Manager for the user to assign and
remove from cardholders’ active badges.
• Access Levels that can be managed by a user are configured on the Area Access Manager
Levels form in the Users folder in System Administration. (To display this form in
System Administration, select the Administration menu, then select the Users option.)
Assign Access Opens the Access Level Assignment Wizard, which allows you to assign access levels to
cardholders, visitors, or specific cardholder/visitor active badge IDs. Selecting this button is
the same as selecting the Edit menu, then selecting Assign Access.
Remove Access Removes the assignment of the selected cardholder, visitor, or specific cardholder/visitor
active badge IDs from the access level that is displayed in the Access level drop-down list.
Selecting this button is the same as selecting the Edit menu, then selecting Remove Access.
This button is grayed out until at least one cardholder, visitor, or specific cardholder/visitor
active badge ID is selected in the Area Access Manager main window.
Personal Displays cardholder/visitor, badge, and access level information for the currently selected
Information cardholder/visitor records. On the Area Access Manager main window, selecting this button is
the same as selecting the View menu, then selecting Personal Information. This button is
grayed out until at least one cardholder/visitor record is selected. If you select multiple
records, you can cycle through them by clicking the arrows in the lower left corner of the
Personal Information window. For more information, refer to Chapter 3: Personal Information
Window on page 37.
24 — revision 1
Area Access Manager User Guide
View Video Displays cameras associated with the currently selected access level. Video is only available
for cameras that have a device-camera link configured with a reader assigned to an access
level. For more information, refer to Chapter 5: View Video on page 63.
Access level The Access level activation date fields consist of a date field and a time field. They are part of
activation date the Filter bar, and are only shown if the Filter Bar option in the View menu is selected.
The Access level activation date fields work in combination with the Access level
deactivation date fields to filter the records shown in the main window based on the access
level activation date and access level deactivation date assigned to a badge when an access
level is assigned. The access level assignment to the badge is only valid (active) between the
dates and times specified in the assignment. (To learn how to assign access level activation and
deactivation dates, refer to Assign Activation and Deactivation Dates to Access Levels on
page 59.)
So for example, consider a badge that has been assigned an access level with an activation date
of 1/1/2006. The badge will not be allowed to gain access to the readers contained in this
access level until 1/1/2006. Similarly, if the access level assignment to the badge had a
deactivation date of 1/31/2006, the badge would not be allowed to gain access to the readers
contained in this access level after 1/31/2006.
The records displayed in the main window depend on what you select in the Access level
activation date and Access level deactivation date fields.
• If you select an activation date but no deactivation date, then all records with an
activation date after the specified activation date will be displayed.
• If you select a deactivation date but no activation date, all records with a deactivation date
before the specified deactivation date will be displayed.
• If you select an activation date and a deactivation date, only those records whose
activation and deactivation dates fall between the two specified dates will be displayed.
• If you select no activation date or deactivation date, all records will be displayed.
• If you select an activation/deactivation date, records without access level activation/
deactivation dates will not be displayed in the main window.
Note: Keep in mind that these fields are merely filtering which records to display; the date
and time do not actually get applied to the badge itself.
Each time you modify the access level activation/deactivation filter date or time, the listing
window is updated with the people that fall within the selected date/time range.
revision 1 — 25
2: Main Window
Access level The Access level deactivation date fields consist of a date field and a time field. They are part
deactivation date of the Filter bar, and are only shown if the Filter Bar option in the View menu is selected.
The Access level deactivation date fields work in combination with the Access level
activation date fields to filter the records shown in the main window based on the access level
activation date and access level deactivation date assigned to a badge when an access level is
assigned. The access level assignment to the badge is only valid (active) between the dates and
times specified in the assignment. (To learn how to assign access level activation and
deactivation dates, refer to Assign Activation and Deactivation Dates to Access Levels on
page 59.)
So for example, consider a badge that has been assigned an access level with an activation date
of 1/1/2006. The badge will not be allowed to gain access to the readers contained in this
access level until 1/1/2006. Similarly, if the access level assignment to the badge had a
deactivation date of 1/31/2006, the badge would not be allowed to gain access to the readers
contained in this access level after 1/31/2006.
The records displayed in the main window depend on what you select in the Access level
activation date and Access level deactivation date fields.
• If you select an activation date but no deactivation date, then all records with an
activation date after the specified activation date will be displayed.
• If you select a deactivation date but no activation date, all records with a deactivation date
before the specified deactivation date will be displayed.
• If you select an activation date and a deactivation date, only those records whose
activation and deactivation dates fall between the two specified dates will be displayed.
• If you select no activation date or deactivation date, all records will be displayed.
• If you select an activation/deactivation date from the Filter bar, records without access
level activation/deactivation dates will not be displayed in the main window.
Note: Keep in mind that these fields are merely filtering which records to display; the date
and time do not actually get applied to the badge itself.
Each time you modify the access level activation/deactivation filter date or time, the listing
window is updated with the people that fall within the selected date/time range.
26 — revision 1
Area Access Manager User Guide
Person search type This field is a part of the Filter bar, and is only shown if the Filter Bar option in the View
menu is selected.
Enables you to select whether to include badge activation dates when searching for
cardholders and visitors.
If “Search for people with current badge activation dates” is selected, then badges that have
the status “Active” and have badge activation/deactivation dates that fall within the current
date/time are listed in the listing window.
For example, if you have a badge with an activation date of 1/1/2005 and a deactivation date of
1/31/2005 and you are using Area Access Manager on 1/10/2005, the badge would be
displayed in the main window (assuming the badge is assigned the access level selected from
the Access level drop-down). If you were to use Area Access Manager on 2/1/2005 this badge
would no longer be displayed in the main window since the activation dates assigned to the
badge have already gone by.
If “Do not include badge activation dates when searching for people” is selected, then all
badges that have the status “Active” are listed, irregardless of their activation and deactivation
dates. This search option is useful in scenarios where there is a person who has occasional
access to a building, and the IT department enables and disables the badge depending on when
this person comes into the office.
revision 1 — 27
2: Main Window
Listing window The contents of the listing window changes depending on whether visitors or cardholders are
displayed. If cardholders are displayed (View > Person Type > Cardholders is selected), the
listing window functions as follows:
The Activate and Deactivate columns are always present, and represent the activation and
deactivation dates of the assigned access level for each cardholder/visitor badge ID. If Active
Badges is not selected in the View menu, then the dates shown are the earliest activation date
and the latest deactivation date for all active badges assigned to the cardholder/visitor.
If Active Badges is selected in the View menu, the listing window contains a Badge ID
column. In this view, the listing window lists multiple entries for each cardholder/visitor, one
for each active badge assigned to the cardholder/visitor.
Additional columns displayed are determined by the fields listed in the Selected Fields column
of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,
you might want to include Last Name, First Name, Middle Name, Extension, and Department.
These same columns are displayed on the Select People and Summary windows in the Access
Level Assignment Wizard.
The results displayed in the listing window are filtered based on the settings in the Filter bar,
which is displayed by selecting Filter Bar from the View menu. The Activate and Deactivate
filter criteria currently being applied are displayed in the status bar.
To sort the listing window’s contents by a particular column, click on the column heading.
Clicking the column heading toggles the sort order between lowest to highest and highest to
lowest.
To select all items in the listing window, select Select All from the Edit menu or press
<Ctrl>+<A>. To deselect all items in the listing window, select Clear All from the Edit menu.
If visitors are displayed instead of cardholders (View > Person Type > Visitors is selected),
the listing window functions the same way, with one exception:
The columns displayed are determined by the fields listed in the Selected Fields column of the
Visitor Search Results Lists form in the Cardholder Options folder. For example, you might
want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.
These same columns are displayed on the Select People and Summary windows in the Access
Level Assignment Wizard.
28 — revision 1
Area Access Manager User Guide
Status bar The status bar is an area along the bottom of the main window that is displayed only when the
Status Bar option in the Edit menu is selected. The status bar displays the following
information:
• The activation and deactivation date and time filter criteria that are being applied to the
listing window. (If no filter is being applied, no filter information is displayed in the
status bar.) The filter criteria can be changed using the Filter bar, which is displayed by
selecting Filter Bar from the View menu.
• The current person type setting, which determines what type of record is displayed in the
listing window. When View > Person Type > Cardholders is selected, cardholder
records are displayed. When View > Person Type > Visitors is selected, visitor records
are displayed.
revision 1 — 29
2: Main Window
6. Click the button to add the selected field to the list of fields that will
be displayed.
7. Repeat steps 5 and 6 until all fields to be displayed are listed in the Selected
Fields column.
8. The order that the fields are listed in the Selected Fields column is the order
that the columns will be displayed in, from left to right, in the Area Access
Manager main window, Select People window, and Summary window.
Select a field in the Selected Fields column, then:
a. Click the button to move the selected field one position to the left,
or
b. Click the button to move the selected field one position to the
right.
Notes: The Activate and Deactivate columns are always the last two columns in the
listing window of the Area Access Manager’s main window regardless of
the list configuration specified on the Cardholder/Visitor Search Results
tabs.
If active badges is turned on (View > Active Badges), the Badge ID column
will be the first column in the listing window of the Area Access Manager’s
main window regardless of the list configuration specified on the
Cardholder/Visitor Search Results tabs.
9. Click [OK].
30 — revision 1
Area Access Manager User Guide
Menus
The menu bar is a horizontal list of options that appears at the top of the main
window. Each option has a pull-down menu. Area Access Manager contains the
following menus:
Application Menu
Menu option Function
Change Password Opens the Change Password dialog, enabling you to change your password (you must have the
corresponding system level permission to do so).
Edit Menu
Menu option Toolbar button Function
Assign Access Opens the Access Level Assignment Wizard, which allows you to
assign access levels to cardholders or visitors. Selecting this menu
option is the same as clicking the [Assign Access] button.
Remove Access Removes the assignment of the selected cardholder or visitor records
from the access level that displayed in the Access Panel drop-down list.
Selecting this menu option is the same as clicking the [Remove Access]
button. This option is grayed out until at least one cardholder or visitor
record is selected in the Area Access Manager main window.
Set Activation Displays the Access Level Activation Dates window, where you can
Dates select when to activate and deactivate the access level that is assigned to
the selected cardholder(s), visitor(s), or specific cardholder/visitor
active badge ID(s). This menu option is only available for selection
when a cardholder, visitor, or specific cardholder/visitor active badge
ID record is selected.
Select All Selects all records listed in the currently selected access level.
Clear All Deselects all records listed in the currently selected access level.
Set Automatic Specifies the number of video channels that should be launched
Video View Count automatically when viewing video. If the total number of cameras
available is greater than this value, the user will have the choice of
which cameras to view.
revision 1 — 31
2: Main Window
View Menu
Menu option Toolbar button Function
Status Bar If selected, the Status bar at the bottom of the screen will be
displayed. If not selected, it will not be displayed.
Filter Bar If selected, displays the Filter bar in the Area Access Manager
main window, where you can specify access level activation
and/or deactivation date and time criteria that all records
displayed in the main window’s listing window must meet.
This in effect filters the records displayed in the main
window.
The current filter settings are displayed in the status bar along
the bottom of the main window, as shown.
Active Badges When selected, the listing windows in the main window and
in the Access Level Assignment Wizard: Select People
window will display a Badge ID column. The listing window
will list multiple entries for each cardholder/visitor, one for
each active badge assigned to the cardholder/visitor.
32 — revision 1
Area Access Manager User Guide
revision 1 — 33
2: Main Window
Note: When the active badges setting is used, the log will
only be written to if active badges for multiple
cardholders or visitors have access levels assigned,
removed, or have an activation/deactivation date
removed or updated.
A failure will be written to the log if:
Help Menu
Menu option Function
About Area Displays copyright information, file versions, and additional information about the
Access Manager application.
34 — revision 1
Area Access Manager User Guide
Remove Access Removes the assignment of the selected cardholder or visitor records from the access level that
displayed in the Access Panel drop-down list. Selecting this option is the same as clicking the
[Remove Access] button or selecting Remove Access from the Edit menu. This option is
grayed out until one or more records are selected in the main window.
Set Activation Displays the Access Level Activation Dates window, where you can select when to activate
Dates and deactivate the access level that is assigned to the selected cardholder(s), visitor(s), or
specific cardholder/visitor active badge ID(s). Selecting this option is the same as selecting
Remove Access from the Edit menu. This option is only available for selection one or more
cardholder, visitor, or specific cardholder/visitor active badge ID records are selected in the
main window.
Personal Displays badge, access level, and cardholder or visitor information for the currently selected
Information cardholder or visitor record(s). Selecting this option is the same as clicking the [Personal
Information] button or selecting Personal Information from the View menu. If you select
multiple records, you can cycle through them by clicking the arrows in the lower left corner of
the Personal Information window.
revision 1 — 35
2: Main Window
36 — revision 1
Area Access Manager User Guide
The first tab may be either the Cardholder tab or the Visitor tab, depending on the
type of record(s) displayed in the Select People window. If View > Person Type
> Cardholders is selected, the Cardholder tab is displayed. If View > Person
Type > Visitors is selected, the Visitor tab is displayed.
Several of the form elements in these sections are common to every form in the
Personal Information window. Refer to the following table for descriptions of the
common form elements.
Note: This documentation refers to cardholder and visitor data fields that are
shipped as the default by Lenel. If you have used the FormsDesigner
application to customize your cardholder or visitor data, the elements on
your forms may be different.
revision 1 — 37
3: Personal Information Window
Last access This field displays information about the most recent valid access by this cardholder, including
the triggered event, date, time and reader name. This is the same information that is displayed
when Show Last Granted Location option is selected in the Cardholder menu in System
Administration.
Note: The information that is displayed in this field in Area Access Manager cannot be
configured any differently. Therefore, even if the Show Last Attempted Location
option in the Cardholder menu in System Administration is selected, only the most
recent valid access can be displayed in Area Access Manager.
Badge ID Displays the numeric identifier assigned to the cardholder/visitor’s active badge.
Issue code Displays the issue code assigned to the cardholder/visitor’s active badge.
Prints Displays the number of times the active badge has been printed.
Badge type Indicates the cardholder/visitor’s badge type. Badge types are configured in the Badge Types
folder in System Administration.
Common form elements - bottom section
Displayed if more than one cardholder or visitor record was selected when
Displayed if more than one cardholder or visitor record was selected when
Displayed if more than one cardholder or visitor record was selected when
Displayed if more than one cardholder or visitor record was selected when
38 — revision 1
Area Access Manager User Guide
Displayed if more than one cardholder or visitor record was selected when
Displayed if more than one cardholder or visitor record was selected when
Record count Indicates the number of the record selected out of the total number of records selected in the
previous window. For example: 6 of 10.
You can type in a number and click <Enter> to jump to that record number.
revision 1 — 39
3: Personal Information Window
40 — revision 1
Area Access Manager User Guide
Cardholder data Displays the cardholder’s information such as name, address and department in these fields.
Record last Indicates the date on which the selected cardholder record was last modified and saved.
changed
This date is updated only when cardholder information is changed, not when badge
information is changed. The last changed date is saved individually for each badge record as
well.
revision 1 — 41
3: Personal Information Window
42 — revision 1
Area Access Manager User Guide
Visitor data Displays the visitor’s information such as name, address and organization in these fields.
Last changed Indicates the date on which the selected visitor record was last modified and saved.
This date is updated only when visitor information is changed, not when badge information is
changed. The last changed date is saved individually for each badge record as well.
revision 1 — 43
3: Personal Information Window
44 — revision 1
Area Access Manager User Guide
revision 1 — 45
3: Personal Information Window
46 — revision 1
Area Access Manager User Guide
Show levels for Lists the badge ID and issue code (in parentheses) for the current active badge. If the Show
badge ID (issue inactive badges checkbox is selected, the list includes both the active and the inactive
code) badge(s) assigned to the selected cardholder. Select a badge ID (issue code) from the list and
the corresponding access levels for that badge will be displayed in the Access levels display.
Show inactive When selected, the Show levels for badge ID (issue code) drop-down list will list both the
badges active and inactive badge(s) assigned to the selected cardholder.
Access levels When the Show unassigned levels checkbox is selected, lists both access levels that have
display been and that can be assigned to the selected cardholder/badge record. If the Show
unassigned levels checkbox is not selected, only access levels that have been assigned will be
listed. If they exist, also displays the access level’s activation and deactivation dates.
Show unassigned When selected, the Access levels display lists both access levels that have been and that can
levels be assigned to the selected cardholder/badge record.
Number of levels Displays the number of access levels that have been assigned to the selected cardholder/badge
assigned record. For example: 6 levels assigned.
1. In the Area Access Manager main window or the Access Level Assignment
Wizard: Select People window, select one or more records.
2. Click .
3. The Personal Information window opens.
• If multiple records were selected, use the arrows in the lower left corner
of the window to cycle through the records.
• If only one record was selected, these arrows are not displayed.
• You can double-click on a single cardholder/visitor to view personal
information for just that cardholder/visitor.
Note: The first tab may be either the Cardholder tab or the Visitor tab, depending
on the type of record(s) being displayed in the main window. If View >
revision 1 — 47
3: Personal Information Window
48 — revision 1
Area Access Manager User Guide
Types of access levels. OnGuard has two types of access levels: standard access
levels and temporary access levels. The difference between the two is that
temporary access levels have an activation and/or deactivation date, and standard
access levels do not.
Creating standard access levels. Standard access levels are created on the
Access Levels form in the Access Levels folder in System Administration. (To
display this form in System Administration, from the Access Control menu,
select Access Levels, then click on the Access Levels tab.)
Controlling what access levels can be managed by a user. The access levels
that can be managed by a user through Area Access Manager are configured on
the Area Access Manager Levels form in the Users folder in System
Administration. (To display this form in System Administration, from the
Administration menu, select Users, click on the Users tab, then click on the
Area Access Manager Levels sub-tab.) Only the access levels listed there for a
user will be available in Area Access Manager for the user to assign and remove
from cardholders’ active badges.
Viewing access levels assignments. The Area Access Manager main window
allows the user to switch between the access levels they have permission to
manage. When an access level is selected, the cardholders with this access level
will be shown in the list.
Segmentation. A user will only be able to assign and remove access levels from
cardholders who have active badges that are of a badge type that the user has
segment access to.
revision 1 — 49
4: Access Levels
50 — revision 1
Area Access Manager User Guide
• The access levels must be selected as access levels to manage from the Area
Access Managers Levels sub-tab on the Users form in the Users folder in
System Administration.
If any of the access levels that are configured as assignable by users with access
to other segments are available for an Area Access Manager user to assign, in
order for the user to see which cardholders are assigned to the readers that make
up these access levels in the Reader Assignments to Cardholders report, the user
must:
• have segment access to the segment that contains the levels that are
configured as assignable by users with access to other segments AND
• be able to manage one of the access levels that belongs to this segment from
Area Access Manager.
revision 1 — 51
4: Access Levels
1. On the Area Access Manager main window in the Access level drop-down
listbox, select an access level to display. This listbox lists all access levels
that the currently logged in user has permission to manage.
2. If the access level you selected has 5000 or more people assigned to it, a
message will ask you to confirm that you really wish to display that access
level.
Note: Although the default Person Count Threshold value of 5000 works well for
most systems, it is possible to change it. For more information, refer to
Appendix D: Person Count Threshold Value on page 103.
1. From the View menu, select Filter Bar. The Filter bar is then displayed in
the Area Access Manager main window.
2. If you wish to display records with any activation date, deselect the date
checkbox in the Access level activation date field and proceed to step 4.
3. If you wish to filter based on a specific access level activation date, select the
date checkbox in the Access level activation date field and then type a
numeric date into the field.
4. In the Access level deactivation date field:
• If you wish to display records with any access level deactivation date,
deselect the date checkbox and proceed to step 5.
• If you wish to filter based on a specific access level deactivation date,
repeat the procedures in step 3 in the Access level deactivation date
field instead of the Access level activation date field. Choose the date
that all records displayed must have been deactivated before.
5. In the Person search type field, select whether to include badge activation
dates when searching for people.
6. Each time you modify the filter criteria in the Filter bar, the listing window is
automatically updated and displays only the records that meet the criteria.
The filter criteria are displayed in the status bar for your reference.
52 — revision 1
Area Access Manager User Guide
1. In the View menu, make sure that the Person Type (cardholder or visitor)
you wish to remove access levels from is selected.
2. In the Access level drop-down list on the Area Access Manager main
window, select the access level you want to remove a cardholder or visitor
from.
3. If removing a cardholder from an access level, select the cardholder(s) or
cardholder/badge ID combination(s) you want the access level removed
from. If removing a visitor from an access level, select the visitor(s) or
visitor/badge ID combination(s) you want the access level removed from.
revision 1 — 53
4: Access Levels
3. Specify the search criteria by typing a full or partial entry in the field(s) on
which you wish to search. For drop-down list fields, you can select the
desired value. Here are some examples:
• Type “Lake” in the Last Name field to find all records of personnel who
have the last name “Lake”.
• Type “M” in the Last Name field to find all records of personnel whose
last name begins with the letter “M”.
• Type a cardholder ID in the Cardholder ID field to find the record of
the person who has that ID number.
• Select an item in the Division drop-down list to find all records of
personnel who work in that division.
• Enter no search criteria to display all cardholder/visitor records. On
systems with a large number of records, this may take a long time
because all records that you have permission to view are returned. If you
54 — revision 1
Area Access Manager User Guide
4. You can also search based on access levels by clicking the Access Levels
tab.
a. Select a search type in the Search type drop-down list.
b. Select the access level you would like the search to be based on.
5. Click [Next].
6. Depending on what you entered for the search criteria, the following may
occur:
a. If one or more cardholder/visitor match the search criteria you entered,
the Select People window is displayed, as shown below:
revision 1 — 55
4: Access Levels
• If only one record was selected, these arrows are not displayed.
• The first tab may be either the Cardholder tab or the Visitor tab,
depending on the type of record(s) displayed in the Select People
window. If View > Person Type > Cardholders is selected, the
Cardholder tab is displayed. If View > Person Type > Visitors is
selected, the Visitor tab is displayed.
8. If assigning access levels to cardholders, select the cardholder(s) or
cardholder/badge ID combination(s) that you want to assign access levels to.
If assigning access levels to visitors, select the visitor(s) or visitor/badge ID
combination(s) that you want to assign access levels to. Click [Next].
9. In the Select Access Levels window, select the access levels you want to
assign to the cardholder/visitor(s) you selected in the previous step. You
must choose one or more access levels to assign. The currently viewed
access level (on the Area Access Manager main window) is selected by
default.
56 — revision 1
Area Access Manager User Guide
Note: For more information, refer to Assign Activation and Deactivation Dates to
Access Levels on page 59.
revision 1 — 57
4: Access Levels
4) Click [OK].
10. Click [Next].
11. The Summary window is displayed, as shown. If you agree with the
summary of the access level assignments that you are about to made, click
[Finish].
12. If the access level(s) are successfully assigned, then a message similar to the
following is displayed. The access levels are assigned to the selected
cardholders/visitors’ active badges and the badges are then downloaded to
the appropriate panels.
a. For information about the failure, click [View Log] in the message. The
Bulk Access Level Action Results window opens and displays the log
file. For more information, refer to Appendix B: Bulk Access Level
Action Results Window on page 97. When you are finished viewing the
log, click [OK].
b. Click [OK] to close the error message. You can view the log again at
any time by selecting Log File from the View menu.
58 — revision 1
Area Access Manager User Guide
1. Open the Access Level Activation Dates window from one of the two
following places:
a. Main window
1) In the main window, select the record(s) you wish to assign
activation dates to. From the Edit menu, select Set Activation
Dates.
2) The Access Level Activation Dates window opens. The access
levels listed in the Assigned Access Levels listing window depend
on how the window was opened. In this case, only the currently
selected access level in the Access level drop-down list on the main
Area Access Manager window will be listed in the Assigned
Access Levels display of the Access Level Activation Dates
window since this is the access level that is currently selected. For
more information, refer to Appendix C: Access Level Activation
Dates Window on page 99.
b. Access Level Assignment Wizard
revision 1 — 59
4: Access Levels
3. In the Activation Date section, either type a numeric date into the field, or
select a date from the drop-down calendar.
spin buttons .
• Once you have selected a month and a year, click on the day that you
want the selected badge to activate on.
60 — revision 1
Area Access Manager User Guide
4. In the Deactivation Date section, repeat step 3, choosing the date when you
want the selected badge to become invalid.
5. Click [Set Date/Time].
6. Repeat steps 2–5 for each access level entry.
7. Click [OK].
8. A message requesting confirmation is displayed. Click [Yes].
revision 1 — 61
4: Access Levels
62 — revision 1
Area Access Manager User Guide
The View Video feature allows users managing an access level to view associated
live video. Multiple video windows from different cameras can be displayed at
the same time. The number of video windows displayed automatically can be
configured or the user may be allowed to select which cameras they wish to view
video for.
Permissions
There are two permissions associated with viewing video in Area Access
Manager.
View Video
To view live video in Area Access Manager, users must have the following
permission configured in System Administration: Monitor Permission Groups >
Monitor > View > Live Video.
Viewing Video
The View Video feature can be configured to allow the user to choose which
cameras to view or to automatically launch cameras when the total number
available for the currently selected access level is less than a specified number.
To view video for the currently selected access level, click the View Video
toolbar button.
revision 1 — 63
5: View Video
Selecting Cameras
If the number of cameras assigned to an access level is greater than the
Automatic Video View Count, the user will be prompted to select which cameras
to view. The reader and panel names are displayed for the selected camera.
64 — revision 1
Area Access Manager User Guide
Chapter 6: Reports
There are two reports that have the “Area Access Manager” report type assigned
to them by default. Thus, the following reports are available by default in Area
Access Manager:
Access Level Listing of each access level, with each cardholder that has
Assignments to that access level assigned to them. Also summarizes the total
Cardholders number of badges that need to be downloaded.
Access Level Listing of each access level by segment, with each cardholder
Assignments to that has that access level assigned to them. This report also
Cardholders By summarizes the total number of badges that need to be
Segment downloaded to each segment. This report only works on a
system using segmentation.
Any other report that you want to be available in Area Access Manager must
have the “Area Access Manager” report type selected; any of the default reports
that you do not want to be available in Area Access Manager must have the have
the “Area Access Manager” report type deselected. For more information, refer
to Configure Which Reports are Available in Area Access Manager on page 66.
Reports run in Area Access Manager are filtered based on the access level(s)
assigned to the Area Access Manager user. This only applies to reports pertaining
to access levels, access groups, Area Access Manager user levels, or readers.
Important: When a system is upgraded, the default report settings are set again. The
default reports mentioned previously become available again in Area Access
Manager, and any reports that were configured with the “Area Access
Manager” report type must be reconfigured to be available in Area Access
Manager.
revision 1 — 65
6: Reports
Reports Window
Reports Window
Form Element Comment
Report listing Lists any reports available in Area Access Manager, which are configured in System
window Administration. By default, there are two reports available: Access Level
Assignments to Cardholders and Access Level Assignments to Cardholders By
Segment. These two reports have the “Area Access Manager” type assigned to them.
Only reports with the “Area Access Manager” type assigned are available in Area
Access Manager.
Print Opens the Print Report Options window.
Preview Displays the selected report in the Report Print Preview window.
66 — revision 1
Area Access Manager User Guide
revision 1 — 67
6: Reports
68 — revision 1
Area Access Manager User Guide
This window is displayed by clicking the [Print] button in the Reports window.
revision 1 — 69
7: Print Report Options Window
70 — revision 1
Area Access Manager User Guide
Print Destination Includes the Print to a Preview Window, Export Directly to a File and Print Directly to a
Printer radio buttons. Also includes the Printer drop-down list and the Prompt for Number
of Pages check box.
Print to a Preview If selected, the Report Print Preview window will be displayed when the [OK] button is
Window clicked. In the Report Print Preview window, you can view the selected report on the screen.
For more information, refer to Chapter 8: Report Print Preview Window on page 73.
Export Directly to If selected, the Export window will be displayed when the [OK] button is clicked. Choose the
a File report Format and Destination from the drop-down lists.
Depending on what you choose, enter the destination and format information in the
corresponding window, then click [OK].
Print Directly to a If selected, also select a printer from the Printer drop-down list.
Printer
If you select the Prompt for Number of Pages check box, the Print window will be displayed
where you can select the print range, number of copies and whether or not to collate your
report.
Printer drop-down Select a printer in this field for the report to be printed on. This field is enabled for selection
list only when the Print Directly to a Printer radio button is selected.
Prompt for This field is enabled for selection only when the Print Directly to a Printer radio button is
Number of Pages selected.
If selected, the Print window will be displayed where you can select the print range, number of
copies and whether or not to collate your report.
Report Subtitle Type the text here that will be displayed as the subtitle on the report.
textbox
Cancel Closes the Print Report Options window without printing the report.
Print a Report
1. In the Reports window, click [Print].
2. The Print Report Options window opens.
revision 1 — 71
7: Print Report Options Window
Note: If the Linkage Server is running under a local system account it may not
have permission to access a network printer (depending on its
configuration). If this is the case you must select a local or default network
printer. Contact your System Administrator to determine what account the
Linkage Server is running under and the printers it can access.
5. In the Report Subtitle section, type the report subtitle. The subtitle will be
displayed below the report title on the report.
6. Click [OK]. The options selected in the Print Destination section will
determine where the report is sent.
72 — revision 1
Area Access Manager User Guide
If you click [Preview] in the Reports window while a report is selected, the report
is automatically printed to the Report Print Preview window.
Previewing a report is done in a window. While the Report Print Preview window
is open, no other window can be opened. From the Report Print Preview window,
you can:
• View an on-screen report created in the Reports window.
• Print a report, save it to a file or send it over electronic mail.
• Search for any textual information in the report.
revision 1 — 73
8: Report Print Preview Window
74 — revision 1
Area Access Manager User Guide
Report navigation The display in the left portion of the Report Print Preview window. The report navigation tree
tree lists the records contained in the report, in a hierarchical arrangement.
The information is content-sensitive. The report type determines the entries in the tree.
For example, the default “User Transaction Log” report is arranged in date order, so the tree
will contain a list of dates. The tree for the default “Text Instructions” report lists alarms. The
“Access and Denials, by Reader” report has an entry for each queried reader, with subentries
by event date.
If the tree has branching entries, you can expand the branches of the tree. When you click an
entry in the tree, you move to that section or record in the report. When a section or record is
selected via the report navigation tree, that section or record will appear in the preview
window with a blue box border. For more information, refer to Preview and Print a Report on
page 76.
Preview window The display in the right portion of the Report Print Preview window. The preview window
displays up to one full page of the report, depending upon the zoom level set. If a report
appears too large for the current window, either adjust the zoom level or use the up, down, left,
and right arrow keys to scroll and see the rest of that page of the report.
For reports that contain more than one page, use the arrows or the <Page Up>/<Page Down>
keys to navigate through the pages.
Click to displays a Print window from where you can select the page range and number of
copies to print, then initiate report printing.
Click to export the report to a file or to your organization’s electronic mail system.
Zoom From this drop-down list, you can select the magnification level of the preview window
contents, with respect to the actual size. Choices include 400%, 300%, 200%, 150%, 100%,
75%, 50%, 25%, Page Width and Whole Page. Selecting either Page Width or Whole Page
displays the corresponding percentage in this field.
You can also type a number directly into this field, but you must then either press <Tab> or
click outside of the field for the number to take effect.
Click to move to the previous page of the report. Another way to do this is to click the <Page
Up> key.
Page count This display indicates the page number of the currently displayed page, followed by the total
page count for the report. For example: “2 of 4.”
Click to move to the next page of the report. Another way to do this is to click the <Page
Down> key.
revision 1 — 75
8: Report Print Preview Window
Click to terminate the report building process. This button is especially useful if the report is
lengthy and you want to view only part of it.
Click to display the Search window from where you can perform a text search of the report.
When you enter text in the Find what field (in the Search window) and click [Find Next], the
view jumps to the first occurrence of the requested text or a message is displayed if no match
was found.
76 — revision 1
Area Access Manager User Guide
• On the right, the preview window will show the first page of the report
as it will look when it is printed. Click a section or record in the preview
window. When a section or record is selected in the preview window,
that section or record will appear in the preview window with a blue box
border.
• Click and drag the split bar to resize the report navigation tree and the
preview window relative to each other.
• Click the button to hide the report navigation tree and maximize
the space used for the preview window.
using your company’s electronic mail system, select the button. The
Export window is displayed.
• Select the format that you want to send the report in from the Format
drop-down list.
• In he tDestination drop-down list, you can choose to export the report
to an application, a disk file, an exchange folder, a Lotus Notes database
or your electronic mail system (if you have one).
• Click [OK] and follow the instructions
7. To print the report from within the Report Print Preview window:
a. Click the button. The Print window is displayed from where you
can select which pages to print and the number of copies.
b. Select one of the following:
• The All radio button to print the entire report without user
intervention.
• The Pages radio button and enter a page range.
c. A message box will be displayed to indicate the status of the print
operation.
revision 1 — 77
8: Report Print Preview Window
1. To search through the report for specific information, click the button.
2. The Search window is displayed. In the Find what field, type the word,
contiguous words or number you wish to locate in the report.
78 — revision 1
Appendix
Area Access Manager User Guide
The Access Level Assignment Wizard is started in one of the following ways:
This section contains screenshots of each of the windows in the Access Level
Assignment Wizard, as well as field tables that describe the function of each field
and button on each window.
A correctly selected record can be highlighted, but does not have to be. However,
a check mark must appear to the left of the entry. The following diagram
illustrates a correctly selected record:
revision 1 — 81
A: Access Level Assignment Wizard
The first tab may be either the Cardholder tab or the Visitor tab depending on the
person type setting. If View > Person Type > Cardholders is selected, the
Cardholder tab is displayed. If View > Person Type > Visitors is selected, the
Visitor tab is displayed.
82 — revision 1
Area Access Manager User Guide
Person type Select the type of person to search for; choices include cardholders or visitors.
If you do not have permission to view either the cardholder or visitor person type, then that
person type will not be available for selection in this drop-down list.
To be able to select the Cardholder option, you must have permission to view cardholders.
(The Cardholder checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab must be selected.)
To be able to select the Visitor option, you must have permission to view visitors. (The Visitor
checkbox on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab must be selected.)
If you switch from one person type to another, the search user interface changes for the
appropriate person type.
If you are currently viewing one person type, launch the Access Level Assignment Wizard and
then assign access levels to the other person type, after the assignment operation has
completed, the main view is switched to the other person type. If the access level operation
failed for all people involved in the assignment operation then the view is not switched.
Person search type Select whether to include badge activation dates when searching for cardholders and visitors.
If “Search for people with current badge activation dates” is selected, then badges that have
the status “Active” and have activation and deactivation dates in the current date/time range
are searched up.
If “Do not include badge activation dates when searching for people” is selected, then all
badges that have the status “Active” are searched up, irregardless of their activation and
deactivation dates. This search option is useful in scenarios where there is a person who has
occasional access to a building, and the IT department enables and disables the badge
depending on when this person comes into the office.
Badge type Selects which of the cardholder’s badges (if he or she has more than one) is to be the active
one.
revision 1 — 83
A: Access Level Assignment Wizard
Record last Indicates the date on which this cardholder record was last saved. This date is only updated
changed when cardholder information is changed, not when badge information is changed. The last
changed date is saved individually for each badge record as well.
Floor Indicates the number of the floor on which the cardholder works
Back This button is grayed out because this is first window in the Access Level Assignment Wizard.
Next Proceeds to the previous window in the Access Level Assignment Wizard.
Cancel Exits the Access Level Assignment Wizard without assigning any access levels.
84 — revision 1
Area Access Manager User Guide
The first tab may be either the Cardholder tab or the Visitor tab depending on the
person type setting. If View > Person Type > Cardholders is selected, the
Cardholder tab is displayed. If View > Person Type > Visitors is selected, the
Visitor tab is displayed.
revision 1 — 85
A: Access Level Assignment Wizard
Person type Select the type of person to search for; choices include cardholders or visitors.
If you do not have permission to view either the cardholder or visitor person type, then that
person type will not be available for selection in this drop-down list.
To be able to select the Cardholder option, you must have permission to view cardholders.
(The Cardholder checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab must be selected.)
To be able to select the Visitor option, you must have permission to view visitors. (The Visitor
checkbox on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab must be selected.)
If you switch from one person type to another, the search user interface changes for the
appropriate person type.
If you are currently viewing one person type, launch the Access Level Assignment Wizard and
then assign access levels to the other person type, after the assignment operation has
completed, the main view is switched to the other person type. If the access level operation
failed for all people involved in the assignment operation then the view is not switched.
Person search type Select whether to include badge activation dates when searching for cardholders and visitors.
If “Search for people with current badge activation dates” is selected, then badges that have
the status “Active” and have activation and deactivation dates in the current date/time range
are searched up.
If “Do not include badge activation dates when searching for people” is selected, then all
badges that have the status “Active” are searched up, irregardless of their activation and
deactivation dates. This search option is useful in scenarios where there is a person who has
occasional access to a building, and the IT department enables and disables the badge
depending on when this person comes into the office.
Badge type Selects which of the visitor’s badges (if he or she has more than one) is to be the active one
Extension Indicates the extension at the office phone number specified where the visitor can be reached
86 — revision 1
Area Access Manager User Guide
Last changed Indicates the date on which this visitor record was last saved. This date is only updated when
visitor information is changed, not when badge information is changed. The last changed date
is saved individually for each badge record as well.
Back This button is grayed out because this is first window in the Access Level Assignment Wizard.
Next Proceeds to the previous window in the Access Level Assignment Wizard.
Cancel Exits the Access Level Assignment Wizard without assigning any access levels.
revision 1 — 87
A: Access Level Assignment Wizard
88 — revision 1
Area Access Manager User Guide
Person type Select the type of person to search for; choices include cardholders or visitors.
If you do not have permission to view either the cardholder or visitor person type, then that
person type will not be available for selection in this drop-down list.
To be able to select the Cardholder option, you must have permission to view cardholders.
(The Cardholder checkbox on the Administration > Users > Cardholder Permission Groups
form > Cardholder sub-tab must be selected.)
To be able to select the Visitor option, you must have permission to view visitors. (The Visitor
checkbox on the Administration > Users > Cardholder Permission Groups form >
Cardholder sub-tab must be selected.)
If you switch from one person type to another, the search user interface changes for the
appropriate person type.
If you are currently viewing one person type, launch the Access Level Assignment Wizard and
then assign access levels to the other person type, after the assignment operation has
completed, the main view is switched to the other person type. If the access level operation
failed for all people involved in the assignment operation then the view is not switched.
Person search type Select whether to include badge activation dates when searching for cardholders and visitors.
If “Search for people with current badge activation dates” is selected, then badges that have
the status “Active” and have activation and deactivation dates in the current date/time range
are searched up.
If “Do not include badge activation dates when searching for people” is selected, then all
badges that have the status “Active” are searched up, irregardless of their activation and
deactivation dates. This search option is useful in scenarios where there is a person who has
occasional access to a building, and the IT department enables and disables the badge
depending on when this person comes into the office.
Badge type Selects which of the cardholder/visitor’s badges (if he or she has more than one) is to be the
active one.
Search type Select the search criteria for the selected access levels.
Access Levels Select the access level you wish to search for.
listing window
Back This button is grayed out because this is first window in the Access Level Assignment Wizard.
Next Proceeds to the previous window in the Access Level Assignment Wizard.
Cancel Exits the Access Level Assignment Wizard without assigning any access levels.
revision 1 — 89
A: Access Level Assignment Wizard
90 — revision 1
Area Access Manager User Guide
listing window The contents of the listing window changes depending on whether visitors or cardholders are
displayed. If cardholders are displayed (View > Person Type > Cardholders is selected), the
listing window functions as follows:
The Activate and Deactivate columns are always present, and represent the activation and
deactivation dates of the assigned access level for each cardholder/visitor or badge ID. If
Active Badges is not selected in the View menu, then the dates shown are the earliest
activation date and the latest deactivation date for all active badges assigned to the cardholder/
visitor.
If Active Badges is selected in the View menu, the listing window contains a Badge ID
column. In this view, the listing window lists multiple entries for each cardholder/visitor, one
for each active badge assigned to the cardholder/visitor.
Additional columns displayed are determined by the fields listed in the Selected Fields column
of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,
you might want to include Last Name, First Name, Middle Name, Extension, and Department.
These same columns are displayed on the Select People window.
To sort the listing window’s contents by a particular column, click on the column heading.
Clicking the column heading toggles the sort order between lowest to highest and highest to
lowest.
To select all items in the listing window, click [Select All]. To deselect all items in the listing
window, click [Clear All].
If visitors are displayed instead of cardholders (View > Person Type > Visitors is selected),
the listing window functions the same way, with one exception:
The columns displayed are determined by the fields listed in the Selected Fields column of the
Visitor Search Results Lists form in the Cardholder Options folder. For example, you might
want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.
These same columns are displayed on the main Area Access Manager window.
Personal Displays cardholder/visitor, badge, and access level information for the selected cardholder/
Information visitor records. On the Area Access Manager window, selecting this button is the same as
selecting the View menu, then selecting Personal Information. This button is grayed out until
at least one cardholder/visitor record is selected. If you select multiple records, you can cycle
through them by clicking the arrows in the lower left corner of the Personal Information
window.
Back Returns to the previous window in the Access Level Assignment Wizard. This button is grayed
out on the first window in the Access Level Assignment Wizard.
Next Proceeds to the previous window in the Access Level Assignment Wizard.
Cancel Exits the Access Level Assignment Wizard without assigning any access levels.
revision 1 — 91
A: Access Level Assignment Wizard
92 — revision 1
Area Access Manager User Guide
Set Activation When an access level is selected and the [Set Activation Dates] button is clicked, the Access
Dates Level Activation Dates window opens. Using this window, an activation and deactivation date
can be assigned for an access level that is assigned to cardholders or visitors.
Access Levels A list of access levels you can assign cardholders or visitors to. Click the icon to the left of the
display access level listed to select that access level for assignment. Multiple access levels can be
selected.
The definition for an access level can be viewed by right-clicking on an access level and
selecting Level Definition from the right-click menu, or by double-clicking on an access level.
A small window will open that lists each reader and timezone that makes up the access level.
Back Returns to the previous window in the Access Level Assignment Wizard. This button is grayed
out on the first window in the Access Level Assignment Wizard.
Next Proceeds to the previous window in the Access Level Assignment Wizard.
Cancel Exits the Access Level Assignment Wizard without assigning any access levels.
revision 1 — 93
A: Access Level Assignment Wizard
Summary Window
94 — revision 1
Area Access Manager User Guide
People who will be Read-only list of cardholders or visitors who will receive the access levels specified in the
receiving access Access levels to assign display. By default, this list is sorted by last name.
level assignments
If cardholders are displayed (View > Person Type > Cardholders is selected), this display
functions as follows:
The Activate and Deactivate columns are always present, and represent the activation and
deactivation dates of the assigned access level for each cardholder/visitor or badge ID. If
Active Badges is not selected in the View menu, then the dates shown are the earliest
activation date and the latest deactivation date for all active badges assigned to the cardholder/
visitor.
Additional columns displayed are determined by the fields listed in the Selected Fields column
of the Cardholder Search Results Lists form in the Cardholder Options folder. For example,
you might want to include Last Name, First Name, Middle Name, Extension, and Department.
These same columns are displayed on theSelect People window and the Area Access Manager
main window.
To sort the listing window’s contents by a particular column, click on the column heading.
Clicking the column heading toggles the sort order between lowest to highest and highest to
lowest.
If visitors are displayed instead of cardholders (View > Person Type > Visitors is selected),
the listing window functions the same way, with one exception:
The columns displayed are determined by the fields listed in the Selected Fields column of the
Visitor Search Results Lists form in the Cardholder Options folder. For example, you might
want to include Visitor Last Name, Visitor First Name, Visitor Organization, and Visitor Title.
These same columns are displayed on theSelect People window and the Area Access Manager
main window.
To change which people access levels will be assigned to, use the [Back] button to return to the
Select People window.
Access levels to Read-only list of access levels that will be assigned to the cardholders or visitors listed in the
assign People who will be receiving access level assignments display.
To change which access levels will be assigned, click [Back] and return to the Select Access
Levels window.
Finish Assigns the selected access levels to the selected cardholders or visitors. Upon finishing, the
access levels will be assigned to the selected cardholders’ or visitors’ active badges and the
badges will be downloaded to the appropriate panels.
Back Returns to the previous window in the Access Level Assignment Wizard. This button is grayed
out on the first window in the Access Level Assignment Wizard.
Cancel Exits the Access Level Assignment Wizard without assigning any access levels.
revision 1 — 95
A: Access Level Assignment Wizard
96 — revision 1
Area Access Manager User Guide
Note: If viewing active badges and performing operations with active badges, this
log will only be written to if you select an active badge for more than one
cardholder. Selecting multiple badges for one cardholder will not get written
to this log.
To view the log simply select Log from the View menu (or navigate to it using Windows
Explorer). If no bulk operations have occurred yet and you select this menu option, an
error message will be displayed. The log file will not be created and written to until the
first bulk access level operation occurs within Area Access Manager.
• badges are segmented and you try to assign an access level to a badge that
the current Area Access Manager user does not have segment access to.
• you violate the system/segment hardware settings for the maximum access
level assignments allowed per badge including total, temporary, and
standard access level assignments.
revision 1 — 97
B: Bulk Access Level Action Results Window
• you violate the system/segment hardware settings for the maximum badge
number length.
Note: If viewing active badges and performing operations with active badges, this log will
only be written to if you select an active badge for more than one cardholder.
Selecting multiple badges for one cardholder will not get written to this log.
If no bulk operations have occurred yet, an error message will be displayed when Log is
selected from the View menu. The log file will not be created and written to until the first bulk
access level operation occurs within Area Access Manager.
• badges are segmented and you try to assign an access level to a badge that the current
Area Access Manager user does not have segment access to.
• you violate the system/segment hardware settings for the maximum access level
assignments allowed per badge including total, temporary, and standard access level
assignments.
• you violate the system/segment hardware settings for the maximum badge number
length.
98 — revision 1
Area Access Manager User Guide
revision 1 — 99
C: Access Level Activation Dates Window
Assigned Access The access levels listed in the Assigned Access Levels listing window depend on how the
Levels display window was opened:
Method 1: In the main window, select the record(s) you wish to assign activation dates to.
From the Edit menu, select Set Activation Dates. If the window was opened using this
method, then only the currently selected access level in the Access level drop-down list on the
main Area Access Manager window will be listed in the Assigned Access Levels display of
the Access Level Activation Dates window since this is the access level that is currently
selected.
Method 2: In the Access Level Assignment Wizard: Select Access Levels window, click [Set
Activation Dates]. If the window was opened using this method, whatever access levels were
selected in the Access Levels display on the Access Level Assignment Wizard: Select Access
Levels window will be listed in the Assigned Access Levels display of the Access Level
Activation Dates window.
Activation Date If the access level should always be activated, then deselect the date checkbox.
If the access level should be activated on a specific date, then select the date checkbox and
click the arrow to the right of the date checkbox. A calendar will drop down, where you can
select the activation date.
By default the activation date begins at 12:00 am (midnight). You can change the time by
typing a new time or by using the up and down arrows to the right of the time field to scroll to
the time the access level should activate.
Deactivation Date If the access level should never be deactivated, then deselect the date checkbox.
If the access level should be deactivated on a specific date, then select the date checkbox and
click the arrow to the right of the date checkbox. A calendar will drop down, where you can
select the deactivation date.
By default the deactivation date ends at 12:00 am (midnight). You can change the time by
typing a new time or by using the up and down arrows to the right of the time field to scroll to
the time the access level should deactivate.
Updates the specified activation and deactivation times if necessary based on the level of
granularity that has been set (in the Granularity field on the General Cardholder Options form
in the Cardholder Options folder).
For example, if the granularity is set to 30 minutes and an activation time of 1:01 pm, 1:15 pm,
or 1:29 pm is specified, the activation time will be changed to 1:00 pm. The time is always
rounded down to the nearest increment of granularity.
Closes the Access Level Activation Dates window and applies the specified changes in
activation and/or deactivation date for the access level that was selected.
100 — revision 1
Area Access Manager User Guide
Cancel Closes the Access Level Activation Dates window without changing the activation and/or
deactivation date for any access levels.
revision 1 — 101
C: Access Level Activation Dates Window
102 — revision 1
Area Access Manager User Guide
The Person Count Threshold value is a setting that determines whether records
assigned to an access level are automatically loaded in the main window when
logging in or when switching which access level is displayed using the Access
level drop-down. This is useful for systems that have large numbers of
cardholders and/or visitors assigned to access levels, as it can take awhile to load
a lot of records.
The default Person Count Threshold value is 5000; if less records than that are
assigned to an access level, then the records will automatically be displayed. If
5000 or more records are assigned to an access level, then the records will not
automatically be displayed.
• If you are logging in, then the Access level drop-down will be expanded, and
you must select an access level to display.
• If you are already logged in and are switching which access level is
displayed (using the Access level drop-down), then a warning message is
displayed if the access level you selected has 5000 or more records.
The Person Count Threshold is only used when you use the Access level drop-
down. If you modify the records being displayed using some other method, such
as applying filters from the Filter bar, assigning/removing access levels, or
enabling/disabling viewing active badges, all records will be displayed.
Although the default person count threshold value of 5000 works well for most
systems, it is possible to change it to a higher or lower value should you need to.
This is done by adding the following ACS.INI file setting:
[AreaAccessManager]
PersonCountThreshold=5000
This setting is not in the ACS.INI file by default. If you wish to use a value other
than the default value of 5000, you must add this setting to the ACS.INI file and
set it to the value you wish to use. If you add or change this ACS.INI setting, you
must shut down and restart Area Access Manager in order for the changes to be
applied.
revision 1 — 103
D: Person Count Threshold Value
104 — revision 1
Area Access Manager User Guide
Appendix E: Troubleshooting
This section describes the error messages you may encounter when working with
Area Access Manager and a list of actions that should be taken if the error
message is encountered.
Login-related Problems
The following error messages may be encountered when attempting to log into
Area Access Manager.
Check: Verify that a license with Area Access Manager support is installed on
the License Server. For more information, refer to Licensing Requirements on
page 10.
Incorrect Username/Password
Error message text: The username/password combination you have entered is
incorrect. Please make sure your username is correct and then retype your
password.
Check: Verify that the username and password you are attempting to enter are
correct. If you still receive an error, contact your system administrator to receive
a new username and password.
revision 1 — 105
E: Troubleshooting
106 — revision 1
Area Access Manager User Guide
Cardholder Fields
Table Field Name
Cardholder Cardholder ID
Cardholder Replication
revision 1 — 107
E: Troubleshooting
Title Title
Department Department
Division Division
Location Location
Building Building
• Verify that the field/page permission group assigned to the user account has
permission to view the visitor fields. At least one of the following must have
“Yes” selected in the View column; only those with “Yes” will be displayed
in the visitor search results list and in Area Access Manager. However, the
Activate and Deactivate fields will always appear in Area Access Manager.
Visitor Fields
Table Field Name
Note: The Visitor First Name, Visitor Last Name, Visitor Middle Name, and
Visitor Last Changed fields from the Visitor Search Results list (in
108 — revision 1
Area Access Manager User Guide
Check:
• In System Administration or ID CredentialCenter, verify that the field/page
permission group assigned to the user account has permission to view the
cardholder fields. For a listing of those fields, refer to the Cardholder Fields
table on page 107.
• In System Administration or ID CredentialCenter, verify the Visitor check box
on the Administration > Users > Cardholder Permission Groups form > Cardholder
sub-tab is selected for your user account.
Check:
• In System Administration or ID CredentialCenter, verify that the field/page
permission group assigned to the user account has permission to view the
visitor fields. For a listing of those fields, refer to the Visitor Fields table on
page 108.
Note: The Visitor First Name, Visitor Last Name, Visitor Middle Name, and
Visitor Last Changed fields from the Visitor Search Results list (in
revision 1 — 109
E: Troubleshooting
Report-related Problems
The following errors may be encountered when attempting to run reports in Area
Access Manager.
Check: Log into System Administration and configure the report(s) that you
wish to be available in Area Access Manager. For more information, refer to
Configure Which Reports are Available in Area Access Manager on page 66.
Solution: When a system is upgraded, the default report settings are set again.
The default reports become available again in Area Access Manager, and any
reports that were configured with the “Area Access Manager” report type must
be reconfigured to be available in Area Access Manager. For more information,
refer to Configure Which Reports are Available in Area Access Manager on page
66.
110 — revision 1
Area Access Manager User Guide
Index
A C
Access Level Assignment wizard ....................... 81 Cardholder form
Access Level Assignments to Cardholders By field table ..................................................... 41
Segment report............................................. 65 Cardholders
Access Level Assignments to Cardholders assign access levels...................................... 53
report............................................................ 65 displaying in Area Access Manager main
Access level displayed upon login...................... 20 window ................................................. 23
Access levels....................................................... 49 person type................................................... 23
Access Level Assignment wizard................ 81 remove access levels.................................... 53
assign to cardholders.................................... 53 shown........................................................... 49
control which can be managed by a user ..... 49 Change
create standard access levels........................ 49 columns displayed on Area Access Manager
create temporary access levels..................... 49 main window ........................................ 30
definition...................................................... 49 columns displayed on Select People
overview ........................................................ 9 window ................................................. 30
remove from cardholders............................. 53 user password .............................................. 13
reports Create
Access Level Assignments to standard access levels .................................. 49
Cardholders ............................ 65 temporary access levels ............................... 49
Access Level Assignments to Cardholders Customize the Select People, Summary, and Area
By Segment ............................ 65 Access Manager main windows .................. 30
types............................................................. 49
view assignments .................................. 49, 51 D
Access Levels form (Cardholders folder) Disable strong password enforcement ................ 12
field table ..................................................... 47
Accounts ............................................................. 14 E
Active badges
access level assignment ............................... 50 Edit menu............................................................ 31
view................................................ 28, 32, 50 Enable strong password enforcement ................. 12
Allow access levels to be configured as assignable Error messages.................................................... 13
by users in other segments........................... 50 Exit the application ............................................. 21
Application menu................................................ 31
Area Access Manager F
main window overview................................ 23 Filter
overview ........................................................ 9 reports .......................................................... 65
report type.................................................... 66 Find People window ........................................... 82
Assign Access Levels form overview...................... 88
access levels to cardholders ......................... 53 Cardholder form overview........................... 82
activation and deactivation dates to access Visitor form overview ................................. 85
levels..................................................... 59
H
B Help menu........................................................... 34
Badge form
field table ..................................................... 45 I
Badges Introduction........................................................... 9
multiple active ............................................. 50
view active ............................................ 23, 28 L
Licensing requirements....................................... 10
In Use setting ............................................... 10
revision 1 — 111
Index
112 — revision 1
Area Access Manager User Guide
W
Weak database password warning ...................... 14
Windows
Access Level Activation Dates.................... 99
Bulk Access Level Action Results .............. 97
Find People .................................................. 82
main ...................................................... 23, 37
Personal Information ................................... 47
Reports......................................................... 66
Select Access Levels.................................... 92
Select People................................................ 90
Summary...................................................... 94
Wizard................................................................. 81
revision 1 — 113
Lenel Systems International, Inc.
1212 Pittsford-Victor Road
Pittsford, New York 14534 USA
Tel 585.248.9720 Fax 585.248.9185
www.lenel.com
docfeedback@lenel.com