Managing User Roles and Access
FactoryTalk® Optix™
uses Role-Based Access Control (RBAC) to control
access to application functionality, data, and user interface elements.
Authentication determines who a user is, while authorization determines what that
user can view, operate, modify, or administer within the application. The application developer defines access permissions and can assign those permissions
to individual users or user groups. You can use permissions to control access to:
- Screens and navigation elements
- Commands and controls
- Alarms and acknowledgments
- Recipes and reports
- Runtime configuration functions
- Administrative and maintenance functions
- Custom application actions and business logic
FactoryTalk® Optix™
supports multiple authentication methods, including
local user management and integration with external identity providers such as Microsoft®
Active Directory when configured. User
credentials, authentication policies, and role assignments are managed as part of
the application design. Developers can implement security at different levels within the application,
ensuring that operators, maintenance personnel, engineers, and administrators have
access only to the functionality required for their responsibilities. You must
design security policies according to the principle of least privilege, granting
users the minimum access necessary to perform their tasks.
IMPORTANT:
The application developer configures
FactoryTalk® Optix™
application security. The available roles,
permissions, and access levels can vary between applications. You must validate user
authorization as part of system commissioning and cybersecurity testing.Provide Feedback