Rockwell Automation RSBizWare BatchCampaign Users Guide - Manual (Page 28)

RSB IZ W ARE B ATCH C AMPAIGN U SER ’ S G UIDE
12
• •
•
•
•
„ Allows any authenticated Windows user to log on to the FactoryTalk Local
Directory.
The installation process automatically adds all members of the local
Windows Authenticated Users group to the FactoryTalk Local Directory.
„ Allows all new user accounts full access permissions. The installation process
automatically sets system policies to allow all new user accounts added to either
directory full access to that directory by default.
Configuring FactoryTalk Security for RSBizWare BatchCampaign
You can restrict access to the features of individual FactoryTalk products in your system
to prevent inadvertent changes or tampering. Only users with the required level of access
can use the product features you secure.
For example, when you set up product policies for RSBizWare BatchCampaign, you
might restrict the ability to issue the
Abort Batch command to a small group of users, to
prevent automated batch processes from going down during run time.
To configure security for multiple features in FactoryTalk, use the Feature Security for
Product Policies dialog box. (See FactoryTalk Help for more information.)
To configure security for the BatchCampaign features, use the product policies defined to
secure BatchCampaign. These product policies are located in the FactoryTalk
Administration Console.
To open the FactoryTalk Administration Console click the Start button, point to All
Programs > Rockwell Software, and then select FactoryTalk Administration Console.
To tighten security for RSBizWare BatchCampaign:
„ Delete the Windows Authenticated Users group from the Local Directory. Secure
the BatchCampaign Configuration Options product policies in the Local Directory
to avoid tampering or unauthorized changes.
„ Create new FactoryTalk user accounts and groups in the FactoryTalk Directory.
Create user accounts and/or groups to secure BatchCampaign. (For more information
see FactoryTalk Help.)
„ Add user accounts and groups created in Windows to the FactoryTalk Directory.
Windows accounts added to the FactoryTalk Directory are Windows-Linked user
accounts and groups. (For more information see FactoryTalk Help.)
Windows Workgroup User Accounts are not supported in FactoryTalk.
If you use Windows workgroups, you cannot administer user accounts centrally for RSBizWare
BatchCampaign. FactoryTalk Directory does not allow multiple user accounts to have the same
name and password.
BatchCampaign.book Page 12 Wednesday, September 19, 2007 4:58 PM