When connecting to Milestone XProtect we require a user is the minimum requirements as below. Create a Basic account or use Domain Service account for this role, add this to the Streaming Engine settings. Create a new Role in XProtect, for this example we have used **Minimum**. Select the `Overall Security` tab. `Management Server` - Tick [Allow] for the below; - `Connect` - Allows the user account to connect to the XProtect service - `Read` - Allows server information to be read; examples recording servers. - `Status API` - Provides access to the XProtect API service ![[z_img/d3597ba5b5c7e5ab7f5c086c3c27e6c1_MD5.jpeg]] `Cameras` - Tick [Allow] for the below options > [!note] > **Overall Security** covers all devices, you need to further limit the cameras available to Streaming Engine service use the **Device** tab instream and apply these settings to individual devices or groups instead. - `Read` - Makes the camera available to the Streaming Engine - `View live` - Provides access to video streams - `Export` - Provides access to playback video streams ![[z_img/fbef2ad14268adf8e19c826e24827b8b_MD5.jpeg]] Add your user to the Role then use this account for the Streaming Engine service to connect.