American Dynamics Intellex Policy Manager, User Manual

Page: 18 / 44

Managing Intellex Advanced Security through Security Settings
12 Intellex® Policy Manager
Editing Security Settings of an Intellex
To edit the security for any of the securable items in the right-hand list, position the mouse over the
item (the cursor becomes a pointer), and click. The Windows Access Control Editor appears. If you
selected a container object (the objects in the list that have a small box before the name), like Multi
Media Data or Administration, a generic editor appears, such as the one below.
Adding users or user groups to a container is a quick way for an administrator to establish a
generic security environment for an instrument. This is because users and groups added at the
container level are inherited to all features in that container. For example, if you add a user named
JSmith to the Multi Media Data container and grant him full access, JSmith will be able to see
everything, regardless of whether he is sitting directly at the instrument (local access) or accessing
the data remotely via Network Client or the API.
When a user or user group is added to a container and then inherited to that container’s child
objects (Multi Media Data to Live Video for instance), permissions are granted on the child object
as follows:
The permissions you can grant there are
Access Locally You grant the user or group permission to access the instrument only at the unit
itself. This means that all remote access via the API or Network Client is
explicitly
not allowed (see Security Concepts for Policy Manager on page 29
below for more information concerning access types).
Access
Remotely You grant the user or group permission to access the instrument only via remote
applications (either third party applications using the API or Network Client).
Full Access You grant the user or group permission to access the instrument both remotely
and locally. In addition, choosing Full Access automatically grants all specific
permissions to all features or feature groups in that container and all containers
or objects directly below that container (see Users, groups and inheritance on
page 32).