The Individual rights tab displays all operator accounts (local accounts and LDAP accounts with the Operator role) and their current individual rights.
For individual rights, a distinction is made between global (server-related) rights (e.g. powering units on/off) and system-related rights (access to particular BS2000 systems).
The tab is not available to a BS2000 administrator, AU administrator, OPENSM2 administrator, OPENUTM administrator, ROBAR administrator or STORMAN administrator.
For operators the functionality is restricted to their own account. They only see their own rights. Only an administrator can make changes.
> | Select Authorizations
|
The Individual rights tab lists all operator accounts together with their individual rights.
Changing global rights
Only the administrator can make changes.
> | By the required account click the Change global rights icon on the right of the SVP column. In the subsequent dialog, assign the required global operator rights. |
Changing system-related rights
Only the administrator can make changes.
> | By the required account, click the Change system-related rights icon in the rightmost column. In the subsequent dialog, assign the required system-related operator rights. |
Managing access to the BS2000 console and dialog
An operator can access the console of a BS2000 system solely by means of individual authorizations.
BS2000 communicates with KVPs using the mnemonic names of the KVP devices concerned. In addition, consoles to be used by operators and administrators in BS2000 must be configured with a mnemonic console name and assigned rights must be configured in the OPR parameter record of the parameter service (see the manual “Introduction to System Administration”, /DEFINE-CONSOLE and /SET-CODE instructions). When a KVP is configured, the mnemonic console names C0 and C1 which are by default configured in BS2000 are automatically assigned. These console names can be changed in BS2000. However, changes become effective only after the BS2000 system has been started up again.
An administrator can always access the BS2000 consoles. Operators can only access BS2000 consoles for which they have an individual right.