View Only Configuration

View Only Configurations are used to restrict your set of permissions to the maximum set of permissions allowed at a computer.

Any permission not contained within the View Only Configuration will be denied by default. For instance, by configuring a View-Only object's Area of Responsibility (AOR) Area Permissions to include just DNA Permission - View and associating the view-only object with a computer located in a non-secure area, you will be unable to modify any RealTime database (RTDB) AOR-based objects (e.g., analog and rate records) using that computer; even if you are normally granted database configuration permission. You can create and modify view-only configurations only with a DNA Permission - Security_Administration . A view-only configuration consists of:

• AOR Area Permissions: The set of DNA Permissions assigned to the AOR Areas that are allowed at the associated computer(s), provided that your configuration has also been granted the DNA Permission for the AOR Area. All other DNA Permissions assigned to the AOR Areas will be denied.

• Role Memberships: The set of security groups (e.g. DNA Permissions) for non-AOR based objects, that are allowed at the associated computer(s), provided that your configuration has also been granted the DNA Permission. Membership in all other security groups will be denied.