WebAccess uses the "Area of Responsibility" concept for control actions.  This allows a user to have varying Levels of access in different Areas of the facility.  For example, a user may be allowed to change Temperature Setpoints in one area of the facility, but not is another.

Each tag in the WebAccess database is assigned to one Area and given one security Level. If a Tag is assigned to Area 0 and Level 0, all users can change the Tag’s value.

Each User is assigned a security Level for each Area.  The default Level is 0 (the lowest).

In order to change the value of a tag, the User's Area and Level must match the Area and Level of the Tag.   WebAccess compares the Tag's Area and Level to the user's Level for that Area.   If the user is assigned a security Level greater than or equal to the Tag's Level in the same Area, then the change is permitted.

If the user's Level and Area do not match the tag's Area and Level, a Popup Dialog Box will appear prompting the user to Login as a new user.  In a Web Browser, this new log in is temporary and applies only to changing the selected tag this one time.

Users assigned as Administrators, Power Users or General Users can view any tag and any field associated with a tag.  Area and Level restrict the ability to change the value of the tag or a tag field.

Restricted Users can only view tags shown on displays assigned to them.  Area and Level further restrict what tags they can change. The ability to Change tags can also be restricted or enabled by graphic display. Restricted Users can acknowledge alarms on assigned displays only if enabled by an engineer or technician. See Graphic Page Access - Restricted Users. 

WebAccess has 31 user defined Areas and 4 special Areas: Local Tag, View Tag, Tag Field and Exit ViewDAQ. Level 127 is administrator level and is required to change Field Tags (for example, change alarm limits from the point detail.  All Field Tags require Level 127 in order to change them. Examples of Tag Fields include Alarm Limits, Description, SPANHI, SPAN LO, and ENG UNITS.

A tag assigned as READ ONLY can't be changed by an operator or administrator.

A Tag is assigned a minimum security level required to change its value and a Tag is assigned to ONE Area.  Any user Assigned to the same Area as the Tag and with a Level equal to or Greater than the Tag's Level can change the tag.