GE C70 Instruction Manual page 224

PRODUCT SETUP
— This setting is applicable for Device authentication only. This setting allows a user to log in with a specific role, as
LOGIN
outlined here. For the Supervisor role, enable the "Supervisor Role" setting. Log out by right-clicking the device in EnerVista
and selecting the Disconnect option.
Whenever a new role is logged in, the user is prompted to enter a password. Passwords must obey the requirements
specified earlier in the chapter in the Password Requirements section.The UR device supports five roles. Roles have their
corresponding passwords, except the Observer role, which does not require a password. There are no time-outs for the
Administrator, Engineer, Operator, and Supervisor when logged in using the front panel; log out manually or use the
Command > Security commands in the software.
The roles are defined as follows:
• Administrator — Complete read/write access to all settings and commands. This role does not allow concurrent
access. This role has an operand to indicate when it is logged on.
• Engineer — Complete read/write access to all settings and commands except configuring Security settings and
firmware upgrades. This role does not allow concurrent access.
• Operator — The Operator has read/write access to all settings under the Commands menu/section. This role does not
5
exist offline.
• Supervisor — This is only an approving role. This role's authentication commits setting changes submitted by
Administrator or Engineer. The Supervisor role authenticates to unlock the UR relay for setting changes and not
approve changes after the fact. Only a Supervisor can set the Settings Lock and Firmware Lock in the Security
settings. This role also has the ability to forcefully log off any other role and clear the security event log. This role can
also be disabled, but only through a Supervisor authentication. When this role is disabled its permissions are assigned
to the Administrator role.
• Observer — This role has read-only access to all C70 settings. This role allows unlimited concurrent access but it has
no download access to any files on the device. Observer is the default role if no authentication has been done to the
device. This role displays as "None" on the front panel. When local authentication is used, no password is required for
this role. When RADIUS server authentication is used, a password is required.
The Factory service role is not available. It is for factory use only.
The Local Access Denied message on the front panel can mean that you need to log in to the UR in order to
complete the action.
Change local passwords
SETTINGS  PRODUCT SETUP  SECURITY  CHANGE LOCAL PASSWORDS
 CHANGE LOCAL
 PASSWORDS
The menu is shown on the front panel upon successful login of the Administrator role.
The setting in this menu is similar to that described in
LOGIN
role.
5-20
 RESTORE DEFAULTS


 SUPERVISORY


SYSLOG IP ADDRESS:

0.0.0.0
SYSLOG PORT NUMBER:

514
LOGIN:

None
NEW PASSWORD:

CONFIRM PASSWORD:

SETTINGS > PRODUCT SETUP > SECURITY
C70 CAPACITOR BANK PROTECTION AND CONTROL SYSTEM – INSTRUCTION MANUAL
CHAPTER 5: SETTINGS
See page 5-21
See page 5-21
Range: 0.0.0.0, 255.255.255.255
Range: 1 to 65535
Range: 20 alphanumeric characters
Range: 20 alphanumeric characters
Range: 20 alphanumeric characters
except for the factory