Watchmark has three different types of "Actors" that can interact with the web and physical doors in various ways - understanding the difference between them will help you set up your account so as to make keeping track of everything easy!


Users

Users have a username(primary email address) so that they can log into watchmark.cloud - they can optionally be associated with multiple Departments (e.g. Accounting, Operations, etc).  They can also install the Watchmark app on their Apple or Android phone. 


If your'e a typical business, you'd enter your employees into Watchmark as users.


Users can always:    

  • Reset their passwords
  • View their recent web activity 
  • View their recent door activity 
  • View the helpdesk

Depending on your Account Settings, they might even be allowed to self-manage any of the following:

  • Edit their username (which is also their primary email in Watchmark)
  • Edit their first and last name
  • Edit their phone number
  • Edit their timezone
  • View their keypad code

Users can be given the following roles:

  • Door - without this role, the user can't access any doors at all (though they can still log into watchmark.cloud and perhaps even manage other users)
  • Auditor - allows read-only access to all data in Watchmark (optionally restricted to certain Departments)
  • Manager - allows day-to-day management of other users and passes (optionally restricted to certain Departments)
  • Billing - allowed to view invoices from Watchmark and update your company's payment info 
  • Admin - can do all the things (e.g. setting up Campuses, Groups, Departments, etc)


Even after you give a user the Door role, they still can't actually access any doors until you assign them to at least one Group, or else give them custom access Rules.




Passes

Passes can't log into watchmark.cloud and have no management capabilities.  They're meant to grant quick, easy access to your facilities, but are less flexible than Users.


If your'e a typical business, you might create Passes for your FedEx driver, your cleaning company, and any other vendors you want to access your facilities at certain times without needing to ring the doorbell and bother your employees. 


Passes cannot be assigned roles, but you can logically think of them as all only having the Door role.




Services

Services represent other software applications that are given some sort of access to Watchmark - maybe viewing/editing data or maybe they're even allowed to open doors.


If your'e a typical business, you might set up Services to sync Users from your HR software or write a custom integration.


Services access Watchmark exclusively through the API - they can't have keypad codes or badges themselves (though if they have the Manager or Admin role they might be able to create Users/Passes and set up keypad codes and badges for them).


Like users, Services can be granted Roles that determine how much they're allowed to do.  Also just like Users, to actually unlock a door a Service would need to have the Door role and also be added to a Group with permission to access that door.