Overview

Security permissions allow administrators to control user access to various functionalities within the platform. The purpose is to manage user rights for editing solution modules and performing actions during runtime. Main functionalities include predefined permission groups (e.g., Administrator, Guest) and specific edit and run permissions. Applications involve configuring user access for the solution Designer workspace, such as allowing tag editing or running diagnostic tools. Requirements include access to the platform's permission settings.

On this page:


Configuring Permissions

To configure, go to Security → Permissions and assign permissions by choosing options in the security settings menu. To do this, you must be logged in as an Administrator. To log in as the Admin, click the home icon at the top-left corner to access the Designer Workspace home page. Then press the Login button to open the Designer Workspace popup login. Enter the username as Administrator. By default, it does not require a password.

Return to the Security → Permissions, and select the Edit and Run permissions for each user group (Administrator, Guest).


Pre-defined Security Groups

The platform comes with a few predefined Permission groups that you can use, or you can create your own.

  • Administrator

  • Guest

  • User

  • Engineering

  • Supervisor

  • Maintenance

  • Operator


Edit Permissions

It is possible to allow or deny a user to edit different modules of the Solution Designer. The available options are shown in the image below.

Edit Permissions Properties

Property

Description

Unrestricted

Select to allow all Edit Permissions

EditTags

Select to allow tag editing.

Historian

Allow edition in Historian module.

Security

Select to allow for the Security module access.

Alarms

Select to allow for the Alarms module access.

Scripts

Select to allow for the Script module access.

Datasets

Select to allow for the Datasets module access.

Displays

Select to allow for the Displays module access.

Reports

Select to allow for the Reports module access.

Startup

Select to allow Startup.

Publish

Select to allow Publish.

Settings

Select to allow for the Settings access.

Notes

Select to allow for the Notes access.

CreateTags

Select to allow tag creating.


Run Permissions

It is also possible to allow or disallow a user to perform different actions during Runtime.

Run Permissions Properties

Property

Description

Unrestricted

The user gets permission to do everything.

Test

Once selected, the user can run a Test.

Startup

Once selected, the user can run a Startup with all the modules. If not, the modules script, datasets, devices, and reports will not start.

Shutdown

Once selected, the user is able to shutdown the application

ClientStart

Once selected, the user is able to run all the modules in a startup. If not, the modules displays and devices will not start.

ClientShutdown

Once selected, the user is able to shutdown the application as a client.

StartTools

Once selected, the user can run the diagnostics tool, such as: property watch, trace window and module information. If it is not selected, the user is unable to start these tools.

ToolsSetValues

Once selected, the user gets the read-only permission in the diagnostics tool, such as: property watch, trace window and module information.

CreateUsers

Once selected, the user is able to create new user for the project.

SwitchApplication

If it is not selected, the user can not switch application, the taskbar disappears.

WebAccess

When the user has this permission, he can access the Web Client through the URL found in the Runtime → Startup→ Web Client URL. If this option is not selected, the user cannot use the Web Client.


Properties Reference

The Properties References present a reference that describes and explains the properties for Security Permissions. The table lists all properties available for the configuration item. However, not all properties described in the documentation are displayed in the data grids by default. Right-click column headers to see which property columns are currently displaying. The displayed properties appear with a check mark.

The data grids allow users to manage and organize information by showing or hiding properties in tables within configuration interfaces. To turn on or off showing a property on the data grid, right-click column headers to select properties or use the reset button to return to default settings. Check out Working with DataGrids for detailed info.

Security Permissions

Property

Description

ID

Identifies uniquely the permission group.

VersionID

Specifies the version of the permission entry's record.

Name

Names the permission entry.

Edit

Allows enabling or disabling specific editing permissions: Unrestricted, EditTags, Security, Scripts, Datasets, Reports, Solution Settings, Historian, Alarms, Devices, Displays, Startup.

Run

Permits enabling or disabling specific running permissions: Unrestricted, Shutdown, ToolsSetValues, SwitchApplication, RemoteManagerAPI, ClientShutdown, CreateUsers, DataAccessAPI, RESTfulAPI.

Level

Defines the level or tier of the permission entry.

Category

Categorizes the permission entry into a specific group or type.

LockState

Indicates the current lock state of the permission entry.

LockOwner

Identifies the owner or responsible entity for the lock on the permission entry.

DateCreated

Records the date when the permission entry was created.

DateModified

Notes the date when the permission entry was last modified.

Description

Describes the purpose or details of the permission entry.


In this section:

  • No labels