Specify activities to track for audit purposes, Uncommon security permissions – Rockwell Automation FactoryTalk View Machine Edition Users Guide User Manual

Page 197

Advertising
background image

11

Set up security

11-21

• •

Specify activities to track for audit purposes

You can keep an audit trail of activities such as changing the setup of the FactoryTalk
Directory and whether security access is denied or granted to users.

To specify which activities to track for audit purposes

1. In the System Policies folder, double-click Audit Policy.

2. Set up audit policies. For details, see Help.

Specify policies for passwords, accounts, and FactoryTalk
sign-on

You can use the FactoryTalk Directory Security Policy to specify how to manage
passwords and user accounts, including how long passwords must be, how often they
must be changed (if ever), and whether to keep a record of deleted user accounts.

Single sign-on

You can also use the Security Policy to turn off FactoryTalk single sign-on. If you turn this
feature off, users must log into FactoryTalk each time FactoryTalk View Studio is
restarted.

To specify how to manage passwords, user accounts, and
FactoryTalk sign-on

1. In the System Policies folder, double-click Security Policy.

Set up options for accounts, passwords, and single sign-on. For details, see Help.

Uncommon security permissions

Although users can adjust the following security permissions, it is very uncommon. Care
must be taken when changing these security permissions from the default settings.

Set up security access to the FactoryTalk Directory

The FactoryTalk Security access that you set up for the FactoryTalk Directory applies to
all FactoryTalk View applications and all Rockwell Automation products installed on the
development computer.

By default, applications and the System folder inherit the security permissions assigned to
the FactoryTalk Directory. This means that you only need to assign permissions to user

Remember that any changes that you make to system security policies will be included as part of
the run-time application. It is therefore very strongly recommended that you do not alter the
default settings in the Security Policy Properties dialog box unless absolutely necessary, and
unless you are aware of the full implications of the changes. Always test the run-time application
to make sure the results are what you intended.

Advertising