Rockwell Automation FactoryTalk Transaction Manager User Guide - Manual (Page 167)

C ●
Securing FactoryTalk Transaction Manager Using FactoryTalk Security
●
●
●
●
●
167
After FactoryTalk Transaction Manager starts, all ties with the machine-wide SSO
are severed; any changes to the machine-wide SSO user do not affect the user
logged into FactoryTalk Transaction Manager. Likewise, if you log out of FactoryTalk
Transaction Manager (select Security > Logoff), the machine-wide SSO user is not
affected.
You are not required to perform any additional operations unless an alternate
FactoryTalk user wants to use FactoryTalk Transaction Manager. If an alternate
FactoryTalk user is desired, you must select Security > Logoff in FactoryTalk
Transaction Manager; then, the alternate user must select Security > Logon and
enter the required user information. Note that if you log off of FactoryTalk
Transaction Manager and another user logs onto FactoryTalk Transaction Manager
via the FactoryTalk Transaction Manager Security menu (Security > Logon), there
is no impact to the SSO user. This also applies when you have a Windows-linked
user account.
S
CENARIO
1: Y
OU
H
AVE A
W
INDOWS
-
LINKED
U
SER
A
CCOUNT
Prior to starting FactoryTalk Transaction Manager, if you:
 are not recognized as the SSO user,
 have a Windows-linked user account in the FactoryTalk Directory.
Then FactoryTalk Transaction Manager recognizes that an SSO is not set at
startup. However, since you have a Windows-linked user account in the
FactoryTalk Directory (and the user information on that account matches
your user information as the currently logged in Microsoft Windows user),
FactoryTalk Security logs you in as the SSO user. FactoryTalk Transaction
Manager uses your user information to represent the logged in FactoryTalk
Transaction Manager user.
S
CENARIO
2: Y
OU
H
AVE A
F
ACTORY
T
ALK
U
SER
A
CCOUNT AND
A
RE
L
OGGED
I
NTO THE
F
ACTORY
T
ALK
D
IRECTORY
Prior to starting FactoryTalk Transaction Manager, if you are:
 a FactoryTalk user (with a FactoryTalk user account in the FactoryTalk
Directory),