Section 4 Local user account management
4.1 Authorization
GUID-981A881D-9229-45E8-9EE5-D6DF2CA457E5 v4
User roles with dif
ferent user rights are predefined in the IED. It is recommended
to use user defined users instead of the predefined built-in users.
The IED users can be created, deleted and edited only with PCM600. One user can
belong to one or several user roles. By default, the users in Table
2 are created in
the IED, and when creating new users, the predefined roles from Table 3 can be
used.
At delivery, the IED user has full access as SuperUser until users
are created with PCM600.
Table 2: Default users
User name User rights
SuperUser Full rights, only presented in LHMI. LHMI is logged on by default until other users
are defined
Guest Only read rights, only presented in LHMI. LHMI is logged on by default when
other users are defined (same as VIEWER)
Administrator Full rights. Password: Administrator. This user has to be used when reading out
disturbances with third party FTP-client.
Table 3: Predefined user roles according to IEC 62351-8
User roles Role explanation User rights
VIEWER Viewer Can read parameters and browse the menus from LHMI
OPERATOR Operator Can read parameters and browse the menus as well as
perform control actions
ENGINEER Engineer Can create and load configurations and change settings
for the IED and also run commands and manage
disturbances
INSTALLER Installer Can load configurations and change settings for the IED
SECADM Security
administrator
Can change role assignments and security settings. Can
deploy certificates.
Table continues on next page
1MRK 511 399-UEN B Section 4
Local user account management
670 series 2.2 IEC 21
Cyber security deployment guideline
To Next Page
Loading...
Need help?
General
