Role-based Security
As another method for managing security within the Plant Applications Administrator, role-based security allows you to integrate your network security configuration with the security in Plant Applications. When you assign a network security group to a Plant Applications Security Role, any new or existing site users can be automatically assigned to the same Security Role, if the site user is added as a role-based user.
In order to configure role-based security, you must be using a computer that is part of the domain and you must be logged on as a user of that domain.
Step 1: Create role-based site user in Plant Applications
First off, you need to decide if you want to use role-based security. Don't worry, it's not an "all or none" decision. You can have some site users participate in role-based security, while others don't have to. And, you can always change your mind. Role-based security is very flexible. When you create a new Plant Applications site user, you simply select the Role-Based option. Tell me how...
Step 2: Create Security Role
Once you've decided to use role-based security, you will need to create Security Roles. Tell me how...
Step 3: Assign Windows Domain Group to Security Role
After creating Security Roles, you will need to edit the security role membership. This is where you assign Windows domain groups to your newly created Security Roles. Tell me how...
Step 4: Assign Security Role to Security Group
Now that you've created your Security Role and assigned Windows domain groups to the Security Role, you can assign the role to a security group. Tell me how...
Example:
For example, let us assume you have a domain group called Bakery_ShiftC, which consists of all employees who work Shift C on the Bakery line. You also have a domain group called Bakery_Supv, which consists of supervisors on the Bakery line. Supervisor Bob works during Shift C and is also a supervisor. Therefore, he is a member of both domain groups. Let us further assume that you have created a Security Role named, Role_Bakery_ShiftC, and you assign the domain Bakery_ShiftC to it. You create another Security Role named, Role_Bakery_Supv, and you assign the domain group Bakery_Supv to it. When you add Supervisor Bob to Plant Applications as a role-based site user, Supervisor Bob would automatically be assigned to any Security Group that has Role_Bakery_Supv or Role_Bakery_ShiftC assigned as a member.