×

It's time to move from Web HMI to Proficy Operations Hub! Visit the Operations Hub web page, download a free trial or check out the datasheet.

Home
Set Up User Security
User Account Overview
Users consist of both operators and GE administrators. In Application Assembler (ThingWorx), a GE administrator creates and maintains user and group accounts for access to Web HMI environments.

Web HMI Products Documentation

Set Up User Security
- User Account Overview
  Users consist of both operators and GE administrators. In Application Assembler (ThingWorx), a GE administrator creates and maintains user and group accounts for access to Web HMI environments.
- Access the Application Assembler
  Set up security for Web HMI users and groups in the Application Assembler.
- Create User Accounts
  You create user accounts by duplicating the default user templates, GEAdmin and GEUser. All settings are inherited from these default user templates except for the password and group membership.
- Assign Users to a Group
  As a GE administrator, you assign users duplicated from the GEUser or GEAdmin user template to the appropriate group.
- Change User Passwords
  GE administrators can change existing user passwords when needed.
- Define LDAP Settings
  Use the LDAP Directory Services in Application Assembler (ThingWorx) to manually edit Web HMI users to exactly match the user names in Active Directory, and then assign them to groups.
- Configure Active Directory Authentication
  Application Assembler (ThingWorx) provides the ActiveDirectory template for you to duplicate to create a directory service for each one of your AD domain servers.

User Account Overview

Users consist of both operators and GE administrators. In Application Assembler (ThingWorx), a GE administrator creates and maintains user and group accounts for access to Web HMI environments.

How User Security Works

Web HMI combines its own user security with your system's user security.

To avoid user access issues, such as a user not being able to acknowledge an alarm or write to a Control Point on a Control View from Web HMI, make sure all user accounts match (exact names) in your system, Windows, and Web HMI.

You can set up Active Directory Authentication, which provides user provisioning.

GE Administrators

Members of the GEAdministrators group have default access to the following:

Administration environment to create Runtime content for operators.
Runtime environment to check its content.
Application Assembler to manage user security and visualizations, which include creating and modifying mashups, masters, menus, style definitions, and state definitions.

GEAdmin is a member of the GEAdministrators group.

Users

GEUser is an operator with permissions to view and interact with content models in the Runtime environment. These members cannot access the Administration environment or the Application Assembler.

GEUser is a member of the GEUsers group.