ABB Relion 670 series Operation Manual page 34

Section 4
Overview
User roles
SECAUD
RBACMNT
ADMINISTRATOR
Table 12:
Function
Authority status
ATHSTAT
Authority check
ATHCHCK
Authority
management
AUTHMAN
For more information on Authority management AUTHMAN, Authority status ATHSTAT, and
Authority check ATHCHCK functions, see Chapter Basic IED functions in technical manual.
At delivery, the IED has a default user defined with full access rights. PCM600 uses this default
user to access the IED. This user is automatically removed in IED when users are defined via
the IED Users tool in PCM600.
Default User ID: Administrator
Password: Administrator
28
Role explanation User rights
Security auditor
RBAC
management
Administrator
rights
Changes in user management settings do not cause an IED reboot.
After three consecutive failed login attempts the user will be locked out for ten
minutes before a new attempt to login can be performed. This time is settable
10 minutes to 60 minutes.
The PCM600 caches the login credentials after successful login for 15 minutes.
During that time no more login will be necessary.
Authority-related IED functions
Description
This function is an indication function block for user logon activity.
User denied attempt to log-on and user successful logon are reported.
To safeguard the interests of our customers, both the IED and the tools that are
accessing the IED are protected, by means of authorization handling. The
authorization handling of the IED and the PCM600 is implemented at both access
points to the IED:
• local, through the local HMI
• remote, through the communication ports
The IED users can be created, deleted and edited only in the CAM server.
This function enables/disables the maintenance menu. It also controls the
maintenance menu log on time out.
Can view audit logs
Can change role assignment
Sum of all rights for SECADM, SECAUD and RBACMNT
This User role is vendor specific and not defined in
IEC 62351–8
1MRK 500 127-UEN D
670 series
Operation manual