Role Based Access Control on EIFE Webpages

RBAC Definition

Role-based access control (RBAC) is a way to assign different levels of access based on what the user’s defined role has been granted to have access to.

Role Definition

The following roles are defined for remote access:

Security administrator (SECADM)
Engineer
Installer
Operator
Viewer

Each role includes a set of permissions on EIFE interface users. According to the roles, the user will have access only to the granted webpages.

NOTE: The permissions for each role are not configurable through EIFE interface webpages.

Permission for Each Role

The following table describes the permissions allowed for each role:

Role	Monitoring	Control	Installation	Settings	File Management	Security
Security administrator	✔					✔
Engineer	✔		✔	✔	✔
Installer	✔		✔	✔	✔
Operator	✔	✔
Viewer	✔

The following table describes the content of each permission group:

Permission Group	Description
Monitoring	This permission group provides READ access to the following information: Metering and measurements Circuit breaker information Date and time information
Control	This permission group provides access to circuit breaker operations.
Installation	This permission group provides access to the following information and operations: Monitoring permissions Reset min/max values of metering and measurements Communication information (diagnostics) and control Date and time settings Product specific settings Information and control of IO module
Settings	This permission group provides access to the following information and operations: Installation permissions Communication settings
File Management	This permission group provides access to the following operation: IEC 61850 configuration files upload to EIFE interface through FTP or FTPS.
Security	This permission group provides access to the following information and operations: Security settings User management