Configure permissions, authorities, and users

The following figure shows the relationships between users, authorities and permissions.

User and user groups are configured in the Active Directory (AD), and Windows authorities are added there for AVEVA Enterprise SCADA purposes. The AVEVA Enterprise SCADA-specific configuration is configured in the Active Directory Lightweight Services (AD LDS) (for example, the Active Directory Application Mode (ADAM)) and consists of the AVEVA Enterprise SCADA authorities. The AVEVA Enterprise SCADA permissions are mappings between them. Also, in the AD LDS, AVEVA Enterprise SCADA authorities are mapped one-to-one to Windows authorities.

• ADAM Authorities are the only members of the DNA ADAM Permissions.

• AD Authorities are the only members of the ADAM Authorities.

• Users (AD) are a member of the AD Authorities.

  

The Network Management Console (NMC) enables the user to configure AVEVA Enterprise SCADA system properties and administer certain AVEVA Enterprise SCADA activities.

Notes: DNA Permissions should not be modified without AVEVA Enterprise SCADA project involvement as they may result in system instability. There is code in AVEVA Enterprise SCADA to prevent the deletion/modification of DNA Permissions that are required by AVEVA Enterprise SCADA. However, if the user uses non-AVEVA Enterprise SCADA tools to change the AD LDS data, then they could introduce problems.

Users are encouraged to modify authorities to suit business requirements.

You must have the necessary user permission level in AVEVA Enterprise SCADA (DNA Permission-Security_Administration) to configure permissions, authorities, and users.