Import Domain Persons

Import Domain Persons

You can import the users in the AD domain in a batch to the system as persons. After importing the person information (including person name and account name) in the AD domain, you can set other information for the persons, such as credentials.

You should configure the active directory settings. See Set Active Directory for details.

  1. Click Person > Person List to enter the Person List Management page.
  2. Click Import > Import Domain Persons to enter the following page.
    Figure 1. Import Domain Persons
  3. Select the importing mode.
    Person

    Import the specified persons. Select the organization unit and select the persons under the organization unit which are displayed in the Domain Person list on the right. It will synchronize person information based on each person.

    Group

    Import all the persons in the organization unit. It will synchronize person information based on each group.

  4. If you select Person as the importing mode, select a person group to import the persons to.
  5. Add the persons to the existing face comparison group(s) which will be used for face recognition and comparison.
    Note:

    After adding the persons to the face comparison group, you should apply the face comparison group to a device to make the settings effective. For details about applying face comparison group to the device, refer to Apply Face Comparison Group to Device.

  6. Set the access control and time & attendance information.
    Effective Period

    Set the effective period for the person in access control application and time & attendance application. For example, if the person is a visitor, his/her effective period may be short and temporary.

    Access Group

    Add the persons to the existing access group(s) which can be linked with access level(s). The linkage of access level and access group defines the access permission that which person(s) can access which access point(s) in the authorized period.

    You can click the access group name to view its linked access levels.

    Move the cursor to the access level to view its access point(s) and access schedule.

    Note:

    You can click Add New to add a new access group. For details, refer to Add Access Group.

    Super User

    If the persons are set as super users, they will be exempted from remaining locked (credential failed) restrictions, all anti-passback rules, and first card authorization.

    Note:

    For details about setting these functions, refer to Edit Door for Current Site.

    Extended Access

    When the persons accessing access point, grant these person more time to pass through doors which have been configured with extended open duration. Use this function for the persons with reduced mobility.

    Note:

    You should set the access point's extended open duration in Logical View. For details, refer to Edit Door for Current Site.

    Attendance Group

    Add the persons to the existing attendance group if your need to monitor the persons' working hours and absenteeism.

    Note:

    You can click Add New to add a new attendance group. For details, refer to Add Attendance Group.

    Note:

    The extended access and super user functions cannot be enabled concurrently.

  7. Complete importing the domain persons.
    • Click Add to add the persons.

    • Click Add and Continue to save the settings and continue to add persons.

  8. Optional: After importing the person information in the domain to the system, you can click the person name to view and edit her/his details.
    Note:
    • If the profile/email in the domain is linked to the profile/email in the system, the persons' profile/email will be imported to the system from the domain as well. You can view the profile/email in the person details page but you cannot edit it.

    • If the profile/email in the domain is NOT linked to the profile/email in the system, you can take a picture or upload a picture as the person's profile and enter the email address.

    • For linking the person information in the domain to the person information in the system, refer to Set Active Directory.

  9. Optional: After importing the person information in the domain to the system, if the person information in domain is changed, click Synchronize Domain Persons to get the latest information of the persons imported to the system. If the persons are imported by group, it will synchronize the latest person information from the domain group (including added persons, deleted persons, edited persons, etc., in the group).

Import Domain Persons

You can import the users in the AD domain in a batch to the system as persons. After importing the person information (including person name and account name) in the AD domain, you can set other information for the persons, such as credentials.

You should configure the active directory settings. See Set Active Directory for details.

  1. Click Person > Person List to enter the Person List Management page.
  2. Click Import > Import Domain Persons to enter the following page.
    Figure 1. Import Domain Persons
  3. Select the importing mode.
    Person

    Import the specified persons. Select the organization unit and select the persons under the organization unit which are displayed in the Domain Person list on the right. It will synchronize person information based on each person.

    Group

    Import all the persons in the organization unit. It will synchronize person information based on each group.

  4. If you select Person as the importing mode, select a person group to import the persons to.
  5. Add the persons to the existing face comparison group(s) which will be used for face recognition and comparison.
    Note:

    After adding the persons to the face comparison group, you should apply the face comparison group to a device to make the settings effective. For details about applying face comparison group to the device, refer to Apply Face Comparison Group to Device.

  6. Set the access control and time & attendance information.
    Effective Period

    Set the effective period for the person in access control application and time & attendance application. For example, if the person is a visitor, his/her effective period may be short and temporary.

    Access Group

    Add the persons to the existing access group(s) which can be linked with access level(s). The linkage of access level and access group defines the access permission that which person(s) can access which access point(s) in the authorized period.

    You can click the access group name to view its linked access levels.

    Move the cursor to the access level to view its access point(s) and access schedule.

    Note:

    You can click Add New to add a new access group. For details, refer to Add Access Group.

    Super User

    If the persons are set as super users, they will be exempted from remaining locked (credential failed) restrictions, all anti-passback rules, and first card authorization.

    Note:

    For details about setting these functions, refer to Edit Door for Current Site.

    Extended Access

    When the persons accessing access point, grant these person more time to pass through doors which have been configured with extended open duration. Use this function for the persons with reduced mobility.

    Note:

    You should set the access point's extended open duration in Logical View. For details, refer to Edit Door for Current Site.

    Attendance Group

    Add the persons to the existing attendance group if your need to monitor the persons' working hours and absenteeism.

    Note:

    You can click Add New to add a new attendance group. For details, refer to Add Attendance Group.

    Note:

    The extended access and super user functions cannot be enabled concurrently.

  7. Complete importing the domain persons.
    • Click Add to add the persons.

    • Click Add and Continue to save the settings and continue to add persons.

  8. Optional: After importing the person information in the domain to the system, you can click the person name to view and edit her/his details.
    Note:
    • If the profile/email in the domain is linked to the profile/email in the system, the persons' profile/email will be imported to the system from the domain as well. You can view the profile/email in the person details page but you cannot edit it.

    • If the profile/email in the domain is NOT linked to the profile/email in the system, you can take a picture or upload a picture as the person's profile and enter the email address.

    • For linking the person information in the domain to the person information in the system, refer to Set Active Directory.

  9. Optional: After importing the person information in the domain to the system, if the person information in domain is changed, click Synchronize Domain Persons to get the latest information of the persons imported to the system. If the persons are imported by group, it will synchronize the latest person information from the domain group (including added persons, deleted persons, edited persons, etc., in the group).