Configure user roles in the Operations Control Management Console

AVEVA Historian uses role-based security to control who can configure the system, manage tags, and access historical data. As a Historian administrator, you assign users or groups to predefined roles so that each user has only the permissions required for their responsibilities.

You configure Historian user roles in the Operations Control Management Console. Changes take effect immediately for new sessions.

Prerequisites

Before you configure user roles, make sure that:

• You have administrator permissions on the Historian server.

• The Historian server is registered and running in the Operations Control Management Console.

• The users or user groups already exist in your authentication provider, such as Windows or Active Directory.

Open the Historian security settings

Use the Operations Control Management Console (OCMC) to access Historian security configuration.

1. Open the Operations Control Management Console.

2. Connect to the Historian server.

3. Expand the Historian server node.

4. Select Security.

The Security view displays the available roles and current role assignments.

Create or modify a Historian role

You can use predefined roles or customize roles to meet site-specific requirements.

5. In the Security view, select Roles.

6. Do one of the following:

   • To create a new role, select Add Role.

   • To modify an existing role, select the role and then select Edit.

7. Enter a clear, descriptive name for the role.

8. Select the permissions that the role requires.

9. Save the role.

Use the principle of least privilege. Grant only the roles that users need to perform their tasks.

Assign users or groups to a role

After you define a role, assign users or groups to it.

10. In the Security view, select Role Assignments.

11. Select the role to which you want to add users or groups.

12. Select Add.

13. Choose one or more users or groups.

14. Apply the changes.

Group-based assignments simplify administration and reduce ongoing maintenance.

Verify role assignments

Always verify that role assignments work as expected.

15. Sign in as a user assigned to the role.

16. Open the Historian tools or clients relevant to that role.

17. Confirm that the user can perform allowed actions and cannot access restricted features.

If access does not match expectations, review the role permissions and assignments.

Security best practices

Follow these recommendations when managing Historian roles:

• Assign roles to groups instead of individual users whenever possible.

• Review role assignments regularly.

• Remove access immediately when users change responsibilities or leave the organization.

• Document any custom roles and their intended use.