Rockwell Automation FactoryTalk AssetCentre Machine Edition Installation Manual - Manual (Page 30)

F ACTORY T ALK A SSET C ENTRE M ACHINE E DITION I NSTALLATION G UIDE
26
• •
•
•
•
5. Specify whether you want to create a new User or a Windows-Linked User. User
accounts are visible only to the FactoryTalk system and their access is independent of
Windows. A Windows-linked user is validated by Windows. For FactoryTalk
AssetCentre Machine Edition either type of account works equally well.
If you choose to use Windows-linked users, consider using Windows-linked group
accounts rather than Windows-linked user accounts if possible. This simplifies the
process if you ever move your software to a different domain. You cannot move
individual Windows-linked user accounts from one domain to another. You can move
Windows-linked group accounts to a new domain, while retaining all of the security
permissions for the group. If you change the domain an individual Windows-linked
user account belongs to, you must delete the old account, create the new account, and
then recreate all of the security permissions for the new account.
6. Enter the information for the user.
Configuring feature security for FactoryTalk AssetCentre users
By default, all users and the Administrators group in FactoryTalk Directory can perform
any task in the FactoryTalk AssetCentre Machine Edition software. To deny specific users
the right to perform tasks in FactoryTalk AssetCentre, you must edit the Feature Security
settings in the FactoryTalk Administration Console.
To change which users can perform tasks in FactoryTalk AssetCentre:
1. Start the FactoryTalk Administration Console (click Start > Programs > Rockwell
Software > FactoryTalk Administration Console).
2. Log on to the Network directory using a FactoryTalk Administrator account.
3. In the Explorer pane of the FactoryTalk Administration Console, navigate to System
> Policies > Product Policies > FactoryTalk AssetCentre.
If you have users who need similar access to features of FactoryTalk AssetCentre Machine
Edition, consider grouping users to make assigning security privileges easier. For example,
you can group all of your electricians into an “Electricians” group, and then provide security
access for them as a group. For information about grouping users, see the online help for the
FactoryTalk Administration Console.
Never explicitly deny rights to the All Users or Administrators group in FactoryTalk. Rather,
set up specific user groups of your own and deny rights to those groups. Denying rights to All
Users or Administrators could lock everyone out and would deny rights in all FactoryTalk-
enabled products on the workstation that use FactoryTalk version 2.10.00 (CPR 9) or version
2.10.11 (CPR 9 SR 1).