Authorizing and Archiving Concept

Authorizing Concept

Each user who makes changes to a datapoint (object), needs the corresponding authorization level. The access privilege also provides protection against unauthorized access of a user or a whole user group.

The authorization concept is based on the WinCC OA user administration:

• Authorization levels - see WinCC OA Online Help "System management -> Authorizations -> Authorization levels"

• Area administration - see WinCC OA Online Help "System Management -> Authorizations -> Areas"

The following authorization levels are used:

Note that at least bit 1 is required for the visualization and opening of panels through bit 2.

Additionally, areas for each object can be defined separately, whereby a project-specific authorization is possible.

For each object (WinCC OA datapoint) the admissible area can be defined in the Objekt.general.area datapoint element.

If the area administration is used (set area on the "area" datapoint element), the authorization is verified via the getUserPermissionForArea() function - otherwise via the getUserPermission() function. For information on these functions, see WinCC OA Online Help.

Archiving Concept

In the archiving concept of the WinCC OA BACnet Application the same AC levels (Archive and Compression levels) are used as for the WinCC OA standard objects.

The following AC levels are predefined for analog objects:

For each object type (WinCC OA datapoint type) the following archives are predefined and can be changed on the ObjecType.Object.property.Present_Value datapoint element.