Table 11:
Predefined user roles according to IEC 62351-8
User roles
Role explanation
User rights
VIEWER
Viewer
Can read parameters and browse the menus from LHMI
OPERATOR
Operator
Can read parameters and browse the menus as well as
perform control actions
ENGINEER
Engineer
Can create and load configurations and change settings
for the IED and also run commands and manage
disturbances
INSTALLER
Installer
Can load configurations and change settings for the IED
SECADM
Security
administrator
Can change role assignments and security settings. Can
deploy certificates.
SECAUD
Security auditor
Can view audit logs
RBACMNT
RBAC
management
Can change role assignment
ADMINISTRATOR
Administrator
rights
Sum of all rights for SECADM, SECAUD and RBACMNT
This User role is vendor specific and
not defined in IEC 62351–8
Changes in user management settings do
not
cause an IED reboot.
After three consecutive failed login attempts the user will be locked
out for ten minutes before a new attempt to login can be performed.
This time is settable 10 minutes to 60 minutes.
The PCM600 caches the login credentials after successful login for
15 minutes. During that time no more login will be necessary.
Section 4
1MRK 500 128-UEN B
Overview
34
650 series 2.2 IEC
Operation manual