RSView Supervisory Edition Installation Guide

• • • • •RSVIEW SUPERVISORY EDITION USER’S GUIDEThe next table shows how someone with administrative access might assign the Commonactions to four groups of RSView users—Administrators, Engineers, Supervisors, andOperators—to give them appropriate levels of access to a distributed application.In the example, in addition to the Common actions listed, each group is allowed the Tagaction Write Value. This action governs general access to HMI and data server tags.Set upthis groupWith these permissionsat the Network DirectoryAnd then overrideinherited permissionsTo set up this level of access to thedistributed applicationAdministratorsAllow Common actions:No changes.Full access.• Configure Security• Create Children• Delete• List Children• Read• WriteAllow Tag action:• Write ValueRetain inheritedpermissions at all lowerlevelresources.This includes the ability to createapplications, add areas and servers, createHMI project components, set up permissionsfor all resources the FactoryTalk Directorymanages, create new users, add users toRSView User Accounts, and secure HMIproject components.See the previous table in this example, for acomplete list of tasks users with full accesscan perform.EngineersAllow Common actions:• same as AdministratorsAllow Tag action:• Write valueExplicitly deny theseCommon actions on theUsers and Groups folder(in the System folder):• Configure Security• Delete• Create ChildrenRetain all other inheritedpermissions.Same access as Administrators, exceptmembers of this group cannot:• set up security for the Users and Groupssub folder of the System folder.• create users at the FactoryTalk Directory.However, members of this group can addusers to RSView User Accounts, assignsecurity codes to them, and use theRSView Secured Commands editor.SupervisorsAllow Common actions:• Read• List ChildrenTag action:• Write ValueExplicitly allow theseCommon actions on theapplication:• Delete• Write• Create ChildrenRun-time access (see Operators group,below), plus, members of this group can:• modify existing applications.• modify HMI server properties.• create HMI project components.Retain all other inheritedpermissions.15-18