21
User management
User Manual PoolManager
®
50
21.2
Users
You have to login as a user in order to receive access rights for certain
functions on PoolManager
®
.
For menu access, choose a username and enter the corresponding
access code (max. 6 digits).
During remote access, logging in with a special username (only for
remote access) and a password is required.
There are two different types of users on PoolManager
®
:
21.2.1
Standard users and user levels
Standard users are predefined users that are ALWAYS available.
Standard users
Designation
Description
Guest (level 0)
May observe menus and parameters, but cannot
modify settings or execute functions.
Customer (level 1)
May modify some settings that are neither relevant to
safety nor critical to function.
Customer (level 2)
May modify comprehensive studies that are not
relevant to safety.
Service (level 3)
May modify all settings and execute all functions. The
only exceptions to this are several special functions
for which master or factory user level is required.
Master (level 4)
May additionally execute several special functions
(e.g. special reset functions).
Factory (level 5)
May additionally execute several factory functions
(e.g. testing and rest functions).
Please find a detailed overview in the section
Overview of user rights.
A set user level is assigned to every standard user (level 1 to level 5),
which determines the associated access rights. Conversely, there is
one predefined standard user for every potential user level.
Furthermore, a changeable access code is assigned to each user,
which must be entered correctly for authentication.
21.2.2
Individual users
Additionally to the predefined standard users, up to 5 individual users
can be created.
For each individual user, there is a separate configuration menu in
which the following settings are available:
Menu sequence
Configuration users (1...5)
Step 1: Configuration menu access
Username (1...5)
(Menu access)
Username for menu access
(An additional username can be established for
remote access)
Access code (1...5)
Access code for authentication of that user
(Code no. with max. 6 digits)
User level (1...5)
(Menu access)
User level for this user:
•
Customer (level 1)
•
Customer (level 2)
•
Service (level 3)
•
Master (level 4)
HAZARD!
Unauthorised access possible from using known
access codes
Access codes facilitate access to critical areas on the
system. Unauthorised access can lead to dangerous
configurations.
Potential consequence: Death or the gravest
degree of injury, heavy material damage.
•
Configure individualised access codes. Under no
circumstances should the preconfigured standard
access codes be used.
•
Keep access codes strictly confidential.
IMPORTANT NOTICE!
Availability of access codes
Ensure that all access codes are known and available
as needed, even after longer periods of time. The
access codes are absolutely necessary for numerous
functions and settings!
21.2.2.1
Remote access
Remote access can only be released in connection with one individual
user. Remote access can be released and individually configured for
each individual user. A separate user level can be defined for remote
access that can be restricted compared to the user's general user
level.
The following settings are available for remote access in the
corresponding sub-menu
Configuration remote access users (1...5)
Menu sequence
Configuration users (1...5)
Step 1: Configuration remote access
Username (1...5)
(Remote access)
Username for remote access.
The username must be entered correctly when
logging on for remote access.
Password (1...5)
(Remote access)
Password for remote access.
This password must be entered correctly when
logging on for remote access.
User level (1...5)
(Remote access)
User level for remote access.:
•
No remote access
•
Guest (level 0)
•
Customer (level 1)
•
Customer (level 2)
•
Service (level 3)
•
Master (level 4)
The user level for remote access cannot be
higher than the general user level for this
individual user. It can be lower or, at the most,
identical.
•
Standard
level
for
remote
access
is
Guest
(level 0),
i.e. settings may not be modified.
•
Settings can only be changed in remote access if the user level is
raised accordingly.
HAZARD!
Unauthorised access
Despite the highest security standards, there is
fundamentally a residual risk for potential unauthorised
access when releasing remote access. Unauthorised
access can lead to dangerous configurations.
Potential consequence: Death or the gravest
degree of injury, heavy material damage.
•
Do not use trivial
usernames or passwords
•
Handle usernames and especially
passwords strictly confidentially
•
Restrict user rights for remote access according to
your individual security needs in
a sensible manner.
•
Only release remote access for the user level
actually needed.
•
Where possible, only use remote access on the
local network and secure it against unauthorised
access via the standard measures.
•
Where possible, use additional security standards
for Internet remote access, e.g. VPN
(virtual private network)