Using multiple areas with privileges

By combining area and privilege restrictions, you can select what control an operator has within a specific area. You can still assign privileges to each of your operators without using areas - to allow them access to the entire plant (global privileges), but by combining Areas and Privileges, you add an extra level of flexibility.

In this first example, John Smith has been assigned the role of Despatch Handler. This role has global privileges 1 and 2. Privilege 3 in the "Despatch" areas (10, 11, and 12), privilege 4 in the "DespatchAccum" area (10) and privilege 5 in areas 10 and 11. This means he can:

• Due to rule 1 and 2, view evry area of the plant.
• Due to rule 1 control every system element in the plant with a value of 1 and 2.
• In area 10, control system elements with a privilege level 1, 2, 3, 4 or 5.
• In area 11, control system elements with privilege level 1, 2, 3 or 5.

Also, in this example, Groups and Labels have been used to make the security configuration intuitive.

Example 2:

In this second example John Smith has been assigned the role of Despatch Handler. This role has no global privileges. Viewable areas, (7,8,9). Privilege 3 in the "Despatch" areas (10, 11, and 12), privilege 4 in the "DespatchAccum" area (10) and privilege 5 in areas 10 and 11. This means he can:

• View areas 7,8,9,10,11,12
• In area 10, control system elements with a privilege level 3, 4 or 5.
• In area 11, control system elements with privilege level 3 or 5.
• In area 12, control system elements with privilege level 3.
• Due to rules 3 and 4, control system elements with privilege level 3,4,5 in Area 0

See Also