Product version

Log on to rate and give feedback 1 2 3 4 5

Products: Automation Server, AS-B, Enterprise Server, AS-P, Project Configuration Tool

Functionalities: User Management

Product version: 1.9

10/12/2017

Software Permission Rules

Software permissions provide members of user account groups with certain access and command permissions.

Building Operation uses the following basic rules to interpret software permission priorities:

Command permissions are only configured on user account groups.
Path permissions configured on lower levels of a path overrule permissions configured on higher levels.

For example, a user account group has the permission Read to the /Trend_Logs path and the permissions Read and Write to the sub-level /Trend_Charts. Users in the user account group have the permission to modify the configuration of objects on the /Trend_Charts path but can only view the objects on the /Trend_Logs path.
If a user belongs to more than one user account group, the rule from the user account group with the highest permission applies:
- The command permission Allow overrides Deny.
- The command permission Deny overrides No Setting.
For example, if a user has inherited the permission to accept an alarm from one user account group, this overrules the permission of another user account group that denies the user the permission to acknowledge alarms.
The software permissions configured for an individual user account overrule the permissions inherited from a user account group.
The path permission rules also apply for the basic commands: Create, Copy, Paste, Cut, Move, Rename, and Delete. For example, you only need the Read permission to copy an object but you need the Create permission to paste an object. See the table for more details.

Table: Path Permissions

Path permission	Description
Read	Permits viewing and listing path content
Write	Permits an administrator to change configurations except for bindings, programs, and graphics
Create	Permits creating new objects on the path
Delete	Permits deleting objects under the path. Delete permissions are required on a folder to delete its contents.
Edit	Permits editing objects on the path
Force	Permits forcing values on the path
Command	Permits the execution of commands on the path. Command permissions can override this permission for specific commands.
Inherited	Indicates that the permissions are inherited from a parent folder