Skip to main content

Milestone Security Advisory

Important update to the XProtect VMS Products Administrator manual — Management Server permissions

Last Updated: 1 minute read
LanguageEnglish

A security notification: We have made an important update to the XProtect VMS Products Administrator manual regarding permissions required to access the XProtect Management Server. The update to the manual is outlined below. XProtect VMS administrator manual

The "Management Server / read" permission is now regarded as a highly privileged administrative permission that grants significant access rights to the XProtect VMS, such as access to sensitive data like credentials configured in the VMS system. However, this permission does not expose credentials for XProtect VMS users, including Basic Users, Windows users, and users from external IDPs (Identity Provider).

Article Number

000004026