Concept
Software Permissions, User Accounts, and User Account Groups
Software permissions can be assigned to individual user accounts and to user account groups.
Path permissions can be assigned to both, individual user accounts and user account groups. Command permissions can be assigned to user account groups only and cannot be assigned to individual user accounts. If you want to assign command permissions to individual user account, you need to create a group with one individual. You assign command permissions to modify specific permissions that user account groups possess to specific objects on the given path.
Relative path permissions and type permissions can be assigned to both, individual user accounts and user account groups.
If no software permissions are configured for a user account or user account group, the user has no access to EcoStruxure Building Operation software. By default, new user accounts and new user account groups have no permissions to access EcoStruxure Building Operation software. Changes to the software permissions of a user account group or user account are applied the next time the user logs on.
You can also combine software permissions with other general policies for the user accounts that are members to the user account groups. For example, you can enable or disable the ability of the group members to change their passwords or to choose the workspace.
For optimal efficiency, assign software permissions to user account groups rather than individual user accounts, wherever possible. Using this approach, you can associate user accounts to at least one user account group for controlled permission to EcoStruxure Building Operation applications. A user account group can comprise both user accounts and other user account groups. You group user accounts and user account groups with similar interests. For instance, you can group software permissions with user accounts based on common tasks and responsibilities
You create a user account for Paul and associate him with the two user account groups: Administrators and Janitors. You associate Paul with those two user account groups. You grant Administrators and Janitors certain software permissions. Paul inherits software permissions of both user account groups.
Software Permissions
Assigning Command Permissions to User Account Groups
Editing Command Permissions of User Account Groups
Removing Command Permissions from User Account Groups
User Accounts and User Account Groups
Creating a User Account Group
User Account Management Overview