ABB Relion 650 Series Technical Manual page 603

1MRK 511 424-UEN B
Bay control REC650 2.2 IEC
Technical manual
One user can have one or several user roles. By default, the users in Table
created in the IED, and when creating new users in the SDM600 server, the
predefined roles from Table
At delivery, the IED user has full access as SuperUser when using
the LHMI and as Administrator when using FTP or PCM600 until
Central Account Management is activated.
Table 480: Default users
User name User rights
SuperUser Full rights, only presented in LHMI. LHMI is logged on by default until other users
are defined
Guest Only read rights, only presented in LHMI. LHMI is logged on by default when
other users are defined (same as VIEWER)
Administrator Full rights. Password: Administrator. This user has to be used when reading out
disturbances with third party FTP-client.
Table 481: Predefined user roles according to IEC 62351-8
User roles Role explanation
VIEWER Viewer
OPERATOR Operator
ENGINEER Engineer
INSTALLER Installer
SECADM Security
administrator
SECAUD Security auditor
RBACMNT RBAC
management
ADMINISTRATOR Administrator
rights
Changes in user management settings do not cause an IED reboot.
The PCM600 tool caches the login credentials after successful login
for 15 minutes. During that time no more login will be necessary.
481 can be used.
User rights
Can read parameters and browse the menus from LHMI
Can read parameters and browse the menus as well as
perform control actions
Can create and load configurations and change settings
for the IED and also run commands and manage
disturbances
Can load configurations and change settings for the IED
Can change role assignments and security settings. Can
deploy certificates.
Can view audit logs
Can change role assignment
Sum of all rights for SECADM, SECAUD and RBACMNT
Section 14
Security
480
This User role is vendor specific and
not defined in IEC 62351–8
are
597