Supported InTouch HMI functionalities

Supported client controls

The following InTouch HMI client controls are supported in Operations Control connected experience using AVEVA Identity Manager authentication.

• Alarm Client Control: The Alarm Client Control leverages SSO functionality so that you can experience a seamless Single Sign-On from the view application for History Blocks. The authenticated user with entitlements can view Historian alarms in the WindowViewer. When security is configured for the application, you can authenticate using AVEVA Identity Manager while performing the following actions:

  • Acknowledge Alarms: If Requires ACK Signature check box is selected in the Run-Time Behavior tab of the Edit Animations dialog box, you have to authenticate using AVEVA Identity Manager. For more information refer to the "Authenticate to Acknowledge Alarms in Operations Control connected experience" topic of Alarm Client Control help.

  • Dismiss Alarms: If Alarm Latch enabled option is selected under File > Configure > Alarms, while dismissing alarms you will get an option to authenticate using AVEVA Identity Manager. For more information refer to the "Dismissing Alarms at Run Time" topic of Alarm Client Control help.

  • Shelve and Unshelve Alarms: If Requires SHELVESignature check box is selected in the Run-Time Behavior tab of the Edit Animations dialog box, you have to authenticate using AVEVA Identity Manager. For more information refer to the "Shelving Alarms" and "Unshelve" Alarms topics of Alarm Client Control help.

    Note: For Alarm Client Control to work in Operations Control connected experience, you must configure External Roles from AVEVA Connect.

• Trend Control: The Trend Control leverages SSO functionality so you experience a seamless Single Sign-On from the view application.

• Trend Pen: The Trend Pen leverages SSO functionality so that you can experience a seamless Single Sign-On from the view application. The authenticated user with entitlements can view Historical Trend in the WindowViewer.

Supported system tags

The following InTouch HMI system tags are supported in Operations Control connected experience using AVEVA ID.

• $AccessLevel: The $AccessLevel system tag has been updated to be used with the AddPermission() method. If a runtime user is a member of multiple groups from AVEVA Connect, the access level will be determined by the group with the highest access level.

• $AccessTokenChanged: The $AccessTokenChanged System Discrete tag is a Read-Only tag.

• $Operator: The $Operator system tag will display the signed in user from AVEVA Connect.

• $OperatorName: The $OperatorName system tag will display the signed in user from AVEVA Connect.

Scripting methods

InTouch HMI also supports scripting methods in Operations Control connected experience. The following scripting methods were either added or modified to support Operations Control connected experience.

• GetAccessToken() Function

• GetSecureAccessToken() Function

• AddPermission() Function

  The AddPermission() method accepts only two parameters in Operations Control connected experience:

  • AVEVA Connect Group

  • Access Level

    Script function for AddPermission() in Operations Control connected experience:

    DiscreteTag=AddPermission("", "AVEVA Connect group", AccessLevel);

    If a runtime user is a member of multiple groups from AVEVA Connect, the access level will be determined by the group with the highest access level.

• GetTokenConnectionStatus() function

• PostLogonDialog() function

• IsAssignedRole() function

• Logoff()

• GetFallBackExpiry() function

• GetOnPremisesIdentity() function

  Note: The ChangePassword() script function is not supported in Operations Control connected experience and will be disabled.

AVEVA Connect Industrial Graphics drive

Operations Control connected experience provides Single Sign-On functionality for CONNECT Industrial Graphics drive in WindowMaker. If you have authenticated in CONNECT under the connected experience, you can view your Industrial Graphics drive when launching WindowMaker. This allows you to start using the CONNECT Industrial Graphics drive in WindowMaker without having to authenticate again. Therefore, in Operations Control connected experience, you will not see the AVEVA Connect tab under File menu of the WindowMaker.

• In Operations Control connected experience when you launch WindowMaker, if you authenticate successfully with CONNECT using your credentials or through Single Sign-On and if you have valid subscription, the WindowMaker will open.

  • You can view your CONNECT Industrial Graphics drives that are available in the Graphic Toolbox. You can also navigate to other tenants in your account using the drop-down menu.

  • You can interact with the Industrial Graphics cloud drive based on the permissions you have on the CONNECT Industrial Graphics drive.

    Note: You must have the Content Contributor role to access CONNECT Industrial Graphics drive. This is required for both Operations Control connected experience and non-connected experience use.

Secured write/verified write

• WindowViewer supports Secured Write and Verified Write with authentication through AVEVA ID.

• You have to authenticate with CONNECT to perform secured write or verified write action.

• SSO is not supported for secured write or verified write operations.

Network Application Development (NAD)

NAD is supported for Operations Control connected experience and authentication with AVEVA Identity Manager.

Web Client

• On launching the Web Client URL, you will be prompted to authenticate with CONNECT.

• After logging in successfully, if you have valid entitlements and permissions, the Web Client runs.