Remove Delete Alarm for Operator in PLC Alarm List
In a 800xA 5.1 RevD FP4 we have AC400,AC800M. We extended it with PLC Connect to Siemens.
Operators are able to delete alarm in the alarm lists witch is not the standard behaviour.
The customer likes to remove the "deleteAlarm" function for the operator in the alarm list be just for the PLC part.
All Alarm list are define under the Workplace Structure. I tried with Security definitions under Control Structure PLC without success.
Please help.
Attached Details of the PLC Alarmlist
Operators are able to delete alarm in the alarm lists witch is not the standard behaviour.
The customer likes to remove the "deleteAlarm" function for the operator in the alarm list be just for the PLC part.
All Alarm list are define under the Workplace Structure. I tried with Security definitions under Control Structure PLC without success.
Please help.
Attached Details of the PLC Alarmlist
Asked 2 months ago
Answers
1
Deletion of an alarm is a powerful command that only few selected users in a system should be able to perform.
In a default system, "Delete" of an alarm is requires the Administrate privilege, which no regular operator should have.
Your picture indicates that members of the user group IndustrialITOperator do posess the powerful Administrate. That seem wrong.
If you mark the row with DeleteAlarm and then click the Explain... button you will be presented with a map where the definition point of the allow is shown. Remove it and your operators should no longer be able to delete alarms.
The same can be applied for Disable/Enable alarm, an operation that should be made with equal care since the alarm list may be filtered for enabled alarm only. Disable = alarm vanishes...
In a default system, "Delete" of an alarm is requires the Administrate privilege, which no regular operator should have.
Your picture indicates that members of the user group IndustrialITOperator do posess the powerful Administrate. That seem wrong.
If you mark the row with DeleteAlarm and then click the Explain... button you will be presented with a map where the definition point of the allow is shown. Remove it and your operators should no longer be able to delete alarms.
The same can be applied for Disable/Enable alarm, an operation that should be made with equal care since the alarm list may be filtered for enabled alarm only. Disable = alarm vanishes...
Add new comment