# User administration

Pearl-2 has different types user accounts. Depending on the type of user, you will have different privileges.

### User types and privileges

There are different types of user accounts:

- Administrator

- Operator

- Viewer

No password is assigned to the user accounts by default. The first time you log in to the Admin panel using the administrator-level account, you're prompted to set passwords for all three user accounts. The Pearl-2 administrator can change passwords at any time using the Admin panel

You cannot change the default user names or disable user levels. When you log in to the Pearl-2, you must log in as one of the three user levels. Private profiles with individually set passwords are not used.

Admin and operator-level users have access to the Admin panel to control the Pearl-2. When logged in to the Admin panel, the user level is displayed at the top right corner of the screen.

**Administrator**

 The administrator account is used for all system configuration and has full access to all configuration features with full access to the web-based Admin panel, local console, and remote log in access. The default user name used to log in to the Pearl-2 is **admin**.

**Operator**

The **operator** account allows users limited configuration control with limited access to the web-based Admin panel, local console, and remote login access. The default user name used to log in to the Pearl-2 is **operator**.

Operators can to do the following:

- Configure inputs

- Control recordings (start and stop)

- Rename, download and delete recordings

- Perform network diagnostics

- Switch layouts while live streaming

If an operator does not have the privileges to apply a particular configuration in the Admin panel, the **Apply **button appears grayed-out in color and is not selectable. Administrators can grant operators permission to perform some administrator tasks

**Viewer**

The global **viewer **account is exclusively used to view streamed channels. You're prompted to enter the default user name **viewer** and password to view a channel's live broadcast.

In addition to the global viewer account, each channel can set a viewer password that overrides the global value

**User privileges**

The following table outlines the default privileges for each user level.

**Table 32 User privileges in the Admin panel**

| **Action or Menu Option** | **viewer** | **operator** | **admin** |
| --- | --- | --- | --- |
| View channel output | ü | ü | ü |
| **Channel Operations** |
| View channel configuration |  | ü | ü |
| Rename a channel |  |  | ü |
| Configure stream channel |  |  | ü |
| Configure stream sources |  |  | ü |
| Start/stop recording |  | ü | ü |
| Start/stop a stream |  | ü | ü |
| Configure channel metadata |  |  | ü |
| Switch layouts while streaming/recording |  | ü | ü |
| Add, duplicate, configure and delete multi-track recorders |  |  | ü |
| Start the stream recorder |  | ü | ü |
| Stop the stream recorder |  | ü | ü |
| View recorded files list |  | ü | ü |
| Rename recorded files |  | ü | ü |
| Download recorded files |  | ü | ü |
| Delete recorded files |  | ü | ü |
| **Input Source Operations** |
| View input source configuration |  | ü | ü |
| Rename input |  |  | ü |
| Configure input |  | ü | ü |
| View input snapshot |  | ü | ü |
| **Network & security** |
| Configure static IP address |  |  | ü |
| Configure DHCP (including Option 81) and DDNS |  |  | ü |
| Change HTTP/HTTPS port values |  |  | ü |
| Configure 802.1x |  |  | ü |
| Configure HTTPS |  |  | ü |
| **CMS Operations** |
| Start/stop scheduled events from the device screen | ü | ü | ü |
| Create ad hoc events from the touch screen | ü | ü | ü |
| Enable CMS and register |  |  | ü |
| Disable CMS or deregister |  |  | ü |
| Configure CMS settings and default event parameters |  |  | ü |
| Start/stop scheduled events (Admin panel) |  | ü | ü |
| Create ad hoc events (Admin panel) |  | ü | ü |
| View the Events page |  | ü | ü |
| **System Configuration Operations** |
| View system configuration |  | ü | ü |
| Configure Automatic File Upload (AFU) |  |  | ü |
| Select External USB drive behavior |  |  | ü |
| Cancel USB file transfers |  | ü | ü |
| Configure network address |  |  | ü |
| Configure date and time preferences |  |  | ü |
| Set or change user passwords |  |  | ü |
| Configure the touch screen |  |  | ü |
| Configure serial port flow control |  |  | ü |
| Upload and delete media |  |  | ü |
| Enable remote support |  |  | ü |
| Backup device configuration |  |  | ü |
| Restore device configuration |  |  | ü |
| Restore factory configuration |  |  | ü |
| Reboot device (Admin panel) |  |  | ü |
| Shutdown device from the Admin panel |  |  | ü |
| Perform a manual disk check |  |  | ü |
| View disk information |  | ü | ü |
| Enable/disable Epiphan Edge feature |  |  | ü |
| Upgrade Firmware |  |  | ü |
| View System Information |  | ü | ü |
| **Network Diagnostics** |
| Bandwidth test |  | ü | ü |
| Connectivity status |  | ü | ü |
| Domain name resolution |  | ü | ü |
| Ping |  | ü | ü |
| Probe |  | ü | ü |
| Trace route |  | ü | ü |

> product: pearl-2 · topic: security · source: pearl-2-userguide.md · updated: Oct 13, 2026
