Rockwell Automation RSBizWare BatchCampaign Users Guide - Manual (Page 29)

2 • Implementing Security
13
•
•
•
• •
„ Remove the All Users group from the BatchCampaign product policies. The
FactoryTalk Services Platform installation process adds the All Users group to all
FactoryTalk product policies. To tighten security for BatchCampaign, remove or
restrict the
All Users group for the BatchCampaign product policies. (See
“Configuring Security for RSBizWare BatchCampaign Commands” for more
information.)
„ Add user accounts and groups to the BatchCampaign product policies. To secure
BatchCampaign resources, add only the necessary user accounts and groups to the
associated product policies. (See “Configuring Security for RSBizWare
BatchCampaign Commands” for more information.)
„ Required User Confirmation: Use the FactoryTalk Administration Console to enable
the Confirm feature for specific BatchCampaign commands. (See “Enabling User
Confirmation for RSBizWare BatchCampaign Commands” for more information.)
Opening RSBizWare BatchCampaign
RSBizWare BatchCampaign uses FactoryTalk Security to determine which users have
permissions to log on to BatchCampaign. One of the product policies created for
BatchCampaign is
Single-SignOn . The BatchCampaign Single-SignOn product policy
setting created in the FactoryTalk Local Directory is used in conjunction with the
FactoryTalk
Use single sign-on system policy setting to enable/disable the FactoryTalk
single sign-on feature which allows users to log on just once, per directory, on a given
computer. Once a user is logged on to the FactoryTalk Directory, all participating
FactoryTalk-enabled products running on the local computer and using that directory
automatically use the security credentials of the FactoryTalk logged on user. (See
FactoryTalk Security Help for more information.)
Opening BatchCampaign when the BatchCampaign Single-SignOn product policy setting
is ‘Enabled’ and the FactoryTalk Use single sign-on system policy setting is ‘True’ the
following scenarios are possible:
„ If a FactoryTalkSecurity user with RSBizWare BatchCampaign permissions opens
RSBizWare BatchCampaign while currently logged on to the FactoryTalk Directory,
the security permissions are the same.
„ If a Windows-linked user with RSBizWare BatchCampaign permissions opens
RSBizWare BatchCampaign, the user will also be logged on to the FactoryTalk
Directory.
„ The Log on to FactoryTalk dialog box opens when a FactoryTalk user is not found.
BatchCampaign.book Page 13 Wednesday, September 19, 2007 4:58 PM