beautypg.com

Configuring security – Rockwell Automation Energy Management Accelerator Toolkit Quick Start User Manual

Page 113

background image

Rockwell Automation Publication IASIMP-QS016C-EN-P - October 2014

113

FactoryTalk EnergyMetrix Groups and Security Setup Chapter 5

Configuring Security

Security is used to restrict various levels of user access to a project on a need-to-know basis. For example, corporate users
typically require only viewing access to plant summary data, where plant maintenance may require editing and viewing
access to the engineering domain.

FactoryTalk EnergyMetrix software provides default roles and users to control access to parts of a project. You can
optionally set up special roles and users.

• Role - A named collection of privileges assigned to a user to manage security. Roles may be global, where they apply

to the entire FactoryTalk EnergyMetrix software system, or domain specific.

• User - A named set of security credentials, user name and password, that permit a user to access privileges of an

assigned role. You can assign more than one role to a user.

In addition to the FactoryTalk EnergyMetrix software default roles, the Efficient Industries Plant 1 example has three roles:

• Engineering Manager - This role has Admin privileges that are limited to the Engineering subdomain. Admin

privileges allow a user to perform editing and viewing operations.

• Accounting Manager - This role has a subset of the Admin privileges that are limited to the Accounting subdomain.
• Production 1 Manager - This role has User privileges that are limited to the Production 1 subdomain. User

privileges allow a user to perform read-only or viewing operations.

The

Roles and Privileges

table on page

114

provides a list of the roles and privileges assigned to each role.

Default Roles

Default User Name

Default Password

Admin

admin

admin

User

user

user

Guest

guest

guest

TIP

It is recommended that you change the default password for the Admin user to prevent inadvertent changes to the
database.