Configure access to the sequence folders

To configure user permissions for AVEVA Real-Time System (RTS), you must configure folder permissions for the <RTSInstall>\sequences folder, where <RTSInstall> is the folder in which you installed RTS. By default, Windows allows access to any users configured on the local computer. Therefore, all users configured on the local computer can access RTS Console. You can configure access for users or user groups by adding or removing their folder permissions.

In these steps, we assume that you have already created two RTS user groups:

• RtsAdmins – Only users that you want to access and manage RTS.

• RtsUsers – Only users that you want to access RTS.

While there are many ways to change folder permissions for users, this procedure focuses only on using the controls on the Security tab of the Properties dialog to change folder permissions. If you are comfortable with using other methods to change folder permissions, you can use those methods instead.

Configure access to the sequence folders

1. In Windows File Explorer, browse to the <RTSInstall>\sequences folder.

2. Right-click the <RTSInstall>\sequences folder, and then select Properties.

   The Properties window appears.

   

3. On the Security tab, select Advanced.

   The Advanced Security Settings window appears.

   

   By default, all users have access to the <RTSInstall>\sequences folder (C:\SimSci\RtsCore\sequences in this example, as shown in the Name entry) because permissions for the folder are inherited from the parent.

   The Inherited from column indicates whether the permissions are inherited. In this example, the folder inherits permissions from the root of the C:\ drive.

4. Select Add.

   The Permission Entry dialog appears.

   

   If you don't see the Add, Remove, or View buttons, select Change permissions first to make the other buttons appear.

5. Select Select a principal.

   The Select User, Computer, Service Account, or Group dialog appears.

   

6. In the Enter the object name to select list, enter the full name, including the domain, of the user or user group that you want to access and manage RTS and all RTS Areas.

   

   If you do not know the name of a user or user group, you can select Advanced to run a search. For a local user group, you should change the From this location entry to the name of the local computer.

   Important: Ensure that you include your own user account in the Enter the object name to select list, either explicitly as an individual user or as a member of a listed user group. Otherwise, you won't have access to RTS or the <RTSInstall>\sequences folder after you complete this procedure.

7. Optional: Select Check Names to verify that the user name or user group names that you entered is valid.

8. Select OK.

   The Permission Entry dialog appears with the Principal entry filled in.

   

9. In the Type list, select Allow.

10. In the Applies to list, select This folder, subfolders and files.

11. In the Basic Permissions area, select Full Control to select all the available permission checkboxes.

    

12. Select OK.

    On the Advanced Security Settings dialog, the new unique, non-inherited permissions appear in the Permission entries list.

    

13. Repeat steps 4 to 12 for each user or user group that you want to access and manage RTS and all RTS Areas.

14. Select Disable inheritance, and then select Remove all inherited permission to remove the default inheritance.

    Important: If your user account is not included in the Permission entries list as a unique, un-inherited permission (either individually or as part of a user group), then you will lose access to the <RTSInstall>\sequences folder after this step.

    The Permission entries list now includes only the unique permission that you added. All inherited permissions are gone.

    

    At this point no one other than the users and user groups that you added can connect to RTS.

15. Repeat steps 4 to 9 for the user or user group that you want to access RTS, but not specific RTS Areas.

16. In the Applies to list, select This folder only.

    This limits access to only the <RTSInstall>\sequences folder without providing access to any configured Area folders. See Sequence folder structure and Manage access to an RTS Area for more information.

17. In the Basic Permissions area, select Full Control to select all the available permission checkboxes.

    

18. Select OK.

    On the Advanced Security Settings dialog, the new unique, non-inherited permissions appear in the Permission entries list.

    

    In this example, any user in the RtsUsers group can also connect to RTS but cannot see any sequences in the individual RTS Areas unless they are given specific access. See Manage access to an RTS Area for more information.

19. Repeat steps 15 to 18 for each user or user group that you want to access RTS, but not specific RTS Areas.

20. Select OK to apply your permission changes and close the Advanced Security Settings dialog.