Understanding permissions, authorities, and users

AVEVA Enterprise SCADA is based on the Principle of Least Privilege (PoLP) and Separation of Duties. These models increase overall operational security by ensuring these following principles.

Principle of Least Privilege (PoLP)

No user has more privileges than what is required to perform their typical operational tasks.

Separation of Duties (SoD)

No single user has the ability to fully compromise a given system, and this encourages a system of checks and balances. When properly implemented and configured, AVEVA Enterprise SCADA will perform the following:

• Significantly increase the difficulty of users accomplishing a task which they are not authorized to perform, and

• Minimize the impact of accidental actions.

Our implementation of these principles are based on three key components:

1. Users

2. Permissions

3. Active Directory Authorities