beautypg.com

Specifying which actions users can perform, Specifying which actions users can perform – 31 – Rockwell Automation FactoryTalk View Site Edition Users Guide User Manual

Page 113

background image

5

S

ETTING

UP

SECURITY

5–31

• •

5 • Pl

aceh

ol

der

You can also set up permissions by selecting the Action option. This means that you
select an action and then specify which users or groups of user can perform the action.

2. Click Add, select the user or group of users to add, and then click OK.

The user or group of users you added should be selected (highlighted) in the Users list,
in the Permissions tab.

3. To explicitly allow permission to perform an action, for the selected user or group of

users, select the Allow check box beside the action.

You can also select the Allow check box beside:

All Actions, to select all the actions that apply to this resource.

A category of actions, such as Common, to select all the actions in the category.

4. To explicitly deny permission to perform an action, for the selected user or group of

users, select the Deny check box beside the action.

5. Repeat steps 2 to 4 for each user or group of users you are setting up with permissions.

6. Click OK.

Any users that are not set up with permissions are removed from the list.

For details about assigning permissions, see the FactoryTalk Security Help.

Specifying which actions users can perform

To secure access to a system resource, you specify which users or groups of users have
permission to perform actions on the resource.

In the previous illustration of the Security Settings dialog box, the Operators group has
permission to perform the Common actions Read and List Children, at the FactoryTalk
Network Directory.

This means that members of the Operators group are allowed to run applications managed
by the directory, in a FactoryTalk View SE Client. For more information about what the
Common actions allow, see the example on page 5-38.

About explicit and implicit permission

Selecting the Deny check box for an action denies permission explicitly. If you do this,
keep in mind that an explicit Deny takes precedence over an explicit Allow. This is
important if the account you are setting up security for belongs to more than one group.

For a network application, you must associate the user or group of users with a computer, or
group of computers, before you can click OK.