Manage user authentication and permissions.

Tutorials → Security | Tutorial | How-to Guide | Reference

This Tutorial Teaches you to:

  • Add user authentication and permission
  • implementing role-based access control
  • Protect Commands on Displays

Prerequisites:


1. Create Security Groups

To be able to change Security Permissions, first, you will need to:

  1. On the top menu, open Actions → Login
    1. User: Administrator

    2. Password: blank (no pass)


As this tutorial is intend to teach, we are creating a new Security Group, in real-life projects prefer always to use the pre-defined groups. If you want to skip the creation of new groups, and to the tutorial with the existing one that is also a valid learning


Navigate to Security → Permissions and configure groups:


OperatorsSupervisorsAdministrators
RunToolsSetValuesToolsSetValues + ShutdownUnrestricted
EditNothingEverything but SecurityUnrestricted


2. Set Security Policies

Go to Security → Policies and configure:

Password Requirements

For Enhanced policy, go to Identification and set:

  • PasswordMinLength: 8 characters
  • PasswordHistory: 3
  • Max age: 90 days
  • BlockOnInvalidAttempts: 3

Session Settings

  • Auto-logoff: Inactivity
  • Timeout: 15 minutes (Operators)
  • Timeout: 30 minutes (Supervisors)
  • No timeout (Administrators)


3. Define Users

  1. Go to Security → Users
  2. Create users:
UserGroupPasswordPolicy
operator1Operatorsoper123Operators
supervisor1Supervisorssuper456Supervisors
adminAdministratoradmin789Administrators

4. Secure Display Elements

Login Page

By default, the solution already has a default page name LogOn. This page contains the required logic to control user Logon on the system once it is running. Feel free to navigate to this display and get yourself familiar with it.

Display Current User

  1. Go to Displays → Draw → MainPage
  2. Add TextBlock:
    • LinkedValue: User: {Client.UserName}
  3. Run solution
  4. Logon using the LogOn page
  5. Check the user that is currently logged on the solution

Restrict Controls

For critical controls (e.g., setpoint changes):

  1. Add a TextBox into the MainPage
  2. Double click, go to Dynamics and check Security
  3. Check Verify Permissions, and set only to Administrator
  4. Run solution
  5. Logon using the LogOn page and the Operator user
  6. To make the control not visible based on Security:
    1. Double click, go to Dynamics and check Security
    2. Check Verify Permissions, and set only to Administrator
    3. Double click then go to Dynamics and check Visibility
    4. Check Hide when security is disabled
    5. Run solution
    6. Validate control not showing based on security

In this section...