Whenever possible, use group accounts to assign the majority of account privileges. You greatly simplify creating a security configuration if you take the time and effort to assess your operators' needs. If the security requirements at your site do not warrant such an effort, use the sample group accounts provided. These accounts provide you with a simpler approach to Configuring Security Features. For example, the sample group accounts define functional roles in a manufacturing facility. You could easily create other group accounts, such as those listed in the following table.
|
To create a group account for... |
Assign the following application features... |
|
Database Designers |
Database Block Add-Delete, Database Manager, Database Reload, and Database Save. |
|
Operator Display Designers |
WorkSpace Configure, WorkSpace Runtime, WorkSpace Runtime Exit, Enable Task Switching, Runtime Visual Basic Editor Access, Database Manager, Database Save, Database Reload, and Database Block Add/Delete. |
|
Recipe Developers |
Recipe Builder Development Window, Recipe Download from the Recipe Builder, Recipe Save from the Recipe Builder, Recipe Upload from the Recipe Builder, and Recipe Text Output from the Recipe Builder. |
|
Supervisors |
WorkSpace Runtime, WorkSpace Runtime Exit, and Enable Task Switching. |
Typically, when assigning privileges to an operator, you select the necessary group accounts first. This assigns common privileges needed by two or more operators doing similar tasks. Then, you can add any specific privileges an operator may require. Configuring your group and user accounts in this way provides a modular approach that is easy to maintain.
For example, in the following figure, the group account Operators defines access to the iFIX WorkSpace run-time environment and specific security areas. These privileges define the common security rights shared by all operators. If an individual operator needs additional rights, for example, to enter electronic signatures, you can assign those rights in his or her own user account.
Sample Accounts
