GE UR F35 Series Instruction Manual page 390

8.2 CYBERSENTRY
Roles
|------------ Change Front Panel
|------------ Update Firmware
|------------ Retrieve File
Table Notes:
1. RW = read and write access
2. R = read access
3. Supervisor = RW (default), Administrator = R (default), Administrator = RW (only if Supervisor role is disabled)
4. NA = the permission is not enforced by CyberSentry Security
d) REMOTE AUTHENTICATION
The UR has been designed to automatically direct authentication requests based on user names. In this respect, local
account names on the UR are considered as reserved, and not provided on a RADIUS server.
The UR automatically detects whether an authentication request is to be handled remotely or locally. When an external
RADIUS server is used, the UR forwards all authentication requests for non-local user accounts to a remote RADIUS
server, and no authentication is managed at the UR itself.
As there are only five local accounts possible on the UR, if the user ID credential does not match one of the five local
accounts, the UR automatically forwards the request to a RADIUS server when one is provided.
If a RADIUS server is provided, but is unreachable over the network, remote authentication requests are denied. In this sit-
uation, use local UR accounts to gain access to the UR system.
See the specific RADIUS server instructions for information on how to provide user accounts and user roles on the
RADIUS server itself. User roles provided in the server must conform to those specified above.
NOTE
Remote user IDs must reside on an external RADIUS server, and must be provided with the requisite user role (see the fol-
lowing example). Users are specified in the RADIUS server configuration file for users. Roles are specified in the RADIUS
server dictionary.
Example:
In the file 'users':
exampleusername User-Password == "examplepassword"
8
8-10
Administrator Engineer
RW RW
Yes No
RW
F35 Multiple Feeder Protection System
Operator Supervisor
RW R
No No
R R R
8 SECURITY
Observer
R
No
R
GE Multilin