Concepto
Command Permissions
To make the system even more flexible and useful, you can assign a user account group special command permissions. Use the command permission to control exceptions from path permissions that allow or deny actions on specific commands.
You can set the following permissions for a command:
No Setting: No Setting is the default command permission setting. No settings means that the path permission, for the folder where the object is located, decides whether the user has permission to modify the object or not.
Deny: Users are not allowed to use the command.
Allow: Users are allowed to use the command.
For example, you allow a user account group to only add comments to trend log records. All other command permissions for trend logs are set to Deny. Users with this command permissions can comment on existing records but are not allowed to perform other actions such as add records or clear the trend log. This assumes that the users have path permission to access the trend logs.
Another example could be that a user account group has the path permission Full Access to a folder that contains BacNet objects. To prevent the users in the user account group from updating the BacNet firmware, you set the command permission for this action to Deny. All other command permissions are set to No Settings. Due to the Full Access path permission, the users can perform all commands on BacNet devices, beside updating the firmware.
A third example could be that a user account group has the path permission Read to the Enterprise Server. To enable the users in the user account group to perform all commands on trend logs in the system, you add the path permission Full Access to the folder containing trend logs and set all the command permissions on the Trends category to Allow.
Building Operation software permissions follow a series of permission rules. You can use these permission rules to manage the type of data and commands the user has access to within a workspace, panel, or domain. Para obtener más información, consulte Software Permissions .
Software Permissions
User Account Group – Software Permissions Tab
User Account – Software Permissions Tab
Assigning Software Permissions to a User Account
Assigning Software Permissions to a User Account Group
User Account Management Overview