800XA Logover is activated for AlarmShelving

Customer want to use alarm shelving feature , but restricted to supervisors only.

When Control room operator is logged in , if we click alarm shelving and enter the supervisor password - its give the message the illegal user name.
To over come this issue we have enabled Log over setting and supervisor the change login with logover option and complete the shelving
Once we enabled the Log over setting we started have new issue , from controler builder to Plant explorer navigation started error
Every time workplace it ask to enter the user name and password
Auto workplace startup also interrupted due to this as it ask for password again

What is solution to have alarm shelving in a Operator Logged in station , by typing the supervisor password

Comments (0) New comment

RPM Rank: 32

Asked 1 year ago

Answer this question Follow

Answers

Shelving need proper permission - better hand out this permission where required using standard methods instead of adding LogOver to the equation.

Starting with Microsoft Windows 8, LogOver which is based on the Microsoft Windows security privilege Impersonate a client after authentication now additionally also requires elevation.

The new method of automatic start of workplace seen in 800xA 6.0 and onwards addresses that w/o causing Microsoft Windows to ask for user credentials at every workplace start.

I have written about this on AKS in past articles.

Hints:
- Scheduled Task
- Run task with highest permission

Comments (5) New comment

by RPM Rank: 32 on 4/5/2020 7:23:19 AM | Like (0) | Report

Shelving point of view we have give access to Supervisor -> we have selected authentication required option as well. In a control room operator station will we running with default operator account . Operators don't want to Login in supervisor Login to do alarm shelving . In operator login operator select the shelving option and supervisor type in his username and password- error message is coming as illegal username , If supervisor login to computer and shelve options select then authentication come he can enter his username and shelve the alarm. So requirement for shelving is coming such a way that same user need to login to workstation as well , which customer want to avoid.

by Stefan Stromqvist AKS expert

Rank: 1 on 4/5/2020 10:33:25 AM | Like (0) | Report

Please submit image of error

by Stefan Stromqvist AKS expert

Rank: 1 on 4/6/2020 6:08:11 AM | Like (0) | Report

I have just tested in my lab.

1) Change Alarm List's Aspect Category permission setting for "ShelveAlarm" from Operate (default) to Administrate

2) Enable LogOver

3) Create an alarm on an object for which the operator has Operate but not the Administrate permission.

4) Start a workplace as operator and navigate to the alarm. The "Shelve Selected" verb is greyed out (expected)

5) Perform logover to an administrator user (having Administrate permission on the object in concern)

6) Shelve Selected is now available and operational

by RPM Rank: 32 on 4/8/2020 12:12:20 PM | Like (0) | Report

In shelving setting we have selected authenticate , where user name and password to be entered when any user select shelving. Customer is asking how we can avoid logover, as any time user select shelving user has to enter username and password . Now customer has to enter two time password as shelving access was only given one specific role.

by Stefan Stromqvist AKS expert

Rank: 1 on 4/8/2020 1:07:16 PM | Like (0) | Report

Don't understand. Bring more details, images, etc.

Add new comment

Stefan Stromqvist AKS expert

Rank: 1

Answered 1 year ago

Question details

800XA Logover is activated for AlarmShelving

Answers

Other questions needing answers

Related topics

AKS experts