Authentication and entitlement

Authentication and entitlement, along with authorization, are security elements that serve to control user access to the AVEVA products that your organization uses.

• Authentication refers to verifying the identity of a user, through the use of a set of unique credentials (user name and password).

• Entitlement refers to the products that your organization has subscriptions for, and to which the authenticated user has been granted access. A user, even though they have been authenticated, may not be entitled to use a particular product, if the user does not have a valid Operations Control subscription.

• Authorization refers to the level of privileges associated with an authenticated user. This is generally done through the assignment of a user to a user group or through federated identity management.

  Federated identity is managed through a Federated Identity Provider (FIDP), and allows unified user management and single sign-on for users across the complete portfolio of AVEVA products. This is enabled through the Configurator, and is generally completed at the time of installation but can be reconfigured at any time.

The license mode you select plays an important role in how authentication, entitlement, and authorization are handled within your System Platform environment. See License mode for more information.

When Operations Control connected experience is enabled, each time a user logs in to a System Platform component, such as the IDE, the Historian, an OMI ViewApp, and so on, the log in is saved as an event in the CONNECT audit log.

View the Data Log

Audit logs let authorized users from both your organization and AVEVA view the log of events or operations that occur in your account from the CONNECT portal. The logs display all operations that have taken place in your organization's account during the selected time period. You must be an Account Administrator, or must have the Report Viewer role to view the audit logs.

Note: Data in the audit logs is available from the time when the Audit functionality is available for your account.

To view the audit logs, go to the AVEVA Connect web site. On the site navigation menu, select Audit. The Audit log page is displayed.

The audit logs provide the following information:

• Timestamp (date and time) when the operation was performed.

• Details of the operation, such as username, machine name, and the application name (for example, AVEVA OMI or System Platform IDE. The information that is logged includes which product or products were accessed by which authenticated user, as well as their available entitlement access.

• The audit log data can be filtered by using the Entitlement Check function in CONNECT. This function provides all data related to product usage through connected experience.

  Note: Local time is used while displaying the data on the user interface. However, the UTC time is shown in the operation details and when the data is exported.

See the CONNECT help for more information about audit logs.