AddPermission() Function

Assigns a certain InTouch access level to a given user group on the local system or on the domain. When a user belonging to that group logs on to the InTouch HMI after the AddPermission() function is called, he or she receives the specified access level.

Category

security

Syntax

DiscreteTag=AddPermission( "Domain", "Group", AccessLevel);

Arguments

Domain

Name of the domain or local computer in which the group is located.

Group

Windows user group.

AccessLevel

InTouch access level that you want to associate with the given group.

Remarks

Valid for operating system security only. When this function is called, it checks for the presence of the specified group in the specified domain or workgroup. If successful, TRUE is returned, and the specified Access Level is associated with the group for subsequent user log ons. In all other cases, (that is, if an invalid value is specified for any of the arguments) FALSE is returned.

This function is typically configured to run on application startup. It does not affect users that are currently logged on. Only users that log on after AddPermission() is successfully called receive the access level associated with their group.

Examples

DiscreteTag=AddPermission( "corporate_hq", "InTouchAdmins", 9000);

DiscreteTag=AddPermission( "johns01", "InTouchUsers", 5000);

Operations Control connected experience

The AddPermission() method accepts only two parameters in Operations Control connected experience:

• CONNECT Group

• Access Level

Script function for AddPermission() in Operations Control connected experience:

DiscreteTag=AddPermission("", "CONNECT group", AccessLevel);

If a runtime user is a member of multiple groups from CONNECT, the access level will be determined by the group with the highest access level.

See Also

PostLogonDialog(), InvisibleVerifyCredentials(), IsAssignedRole(), AttemptInvisibleLogon(), QueryGroupMembership()