Rockwell Automation FactoryTalk View Site Edition Users Guide - Manual (Page 104)

F ACTORY T ALK V IEW S ITE E DITION U SER ’ S G UIDE
5–22
• •
•
•
•
About the All Users account
During FactoryTalk Services Platform installation, an account named All Users is created
automatically, at the Local Directory and the Network Directory.
This means that initially, after the FactoryTalk View SE software is installed, any
FactoryTalk system user you create will be able to open, create, or modify an application
in FactoryTalk View Studio.
To restrict access to FactoryTalk system resources for selected users and computers, you
need to remove the All Users account, create accounts for the users and computers you
want to secure, and then give the accounts the appropriate security permissions.
Removing All Users from the FactoryTalk Directory also removes the account at all levels
of the directory hierarchy, including any application the directory manages, and the
directory System folder.
This means that all users will no longer have full access to all parts of the control system.
To remove the All Users account from the FactoryTalk Directory
1. In FactoryTalk View Studio, in the Explorer window, right-click the directory node,
and then select Security.
2. In the accounts list, select ALL USERS, and then click Security Accounts.
3. In the Security Settings dialog box, select the ALL USERS account, click Remove,
and then click OK.
Specifying which users can set up security
When setting up security, one of the first things you should do is ensure that only a group
of authorized, trusted users is able to change security settings at the FactoryTalk
Directory.
You can do this by allowing only members of the Administrators group permission to
perform the Configure Security action on the FactoryTalk Directory.
Before removing the All Users account from FactoryTalk Directory, ensure that you have created
at least one other account, that has permission to set up security for the directory. For more
information, see “Specifying which users can set up security,” next.
If you remove All Users from the FactoryTalk Directory, the corresponding account in the
Runtime Security editor will also be removed. To avoid unexpected results before removing the
All Users account, ensure that you have set up the necessary run-time accounts.