Authorization Category-Based Privileges - Metasys - LIT-1201528 - General System Information - Metasys System

Authorization Category-Based Privileges - Metasys - LIT-1201528 - General System Information - Metasys System - 12.0

Security Administrator System Technical Bulletin

Product

Building Automation Systems > Building Automation Systems > Metasys System

Document type

Technical Bulletin

Document number

LIT-1201528

Version

12.0

Revision date

2022-08-05

Category-based privileges apply to specific categories of Metasys system objects. When you assign users a category-based privilege, they can perform the actions associated with that privilege only on specific categories of objects for which that privilege is granted. The Security System has a predefined set of categories available (for example, HVAC and Fire).

If you do not assign users View access permission to a particular category of items, they cannot see the details of those items in the View panel, limiting user access to items (objects, trends, and schedules) within the navigation tree.

Table 1 describes all the predefined authorization category-based privileges.

Table 1. Authorization Category-Based Privileges
Permission	Permission Privileges
No Access	Designates that the user has no access to the items in the specified category.
View	Gives the user the following privileges: view event, snooze event, focus view in panel, view item value, view item on graphic, view item in report, summary view in panel, user navigation views (display panel only), view all extensions in panel, hyperlink from graphic, and view the list of attribute commands (generic integration object). Note: To snooze an alarm in the alarm bar, the user must have View permission and Manage Item Events permission. To display the Audit Viewer, the user must have View permission and View Metasys Status permission.
Advanced View	Gives the user the same privileges as the View permission, in addition to the capability of editing the advanced attributes for users with edit privileges. When not selected, the Advanced option in all item views (for example, Focus view) is disabled.
Operate	Gives the user the following privileges: Adjust commands; State commands based on States Text – BV, BO, MV, MO; Setpoint; Route (Trend); Execute (Trend); Re-command (Interlock); Set State.
Intervene	Gives the user the following privileges: Release; Release All; Operator Override; Release Operator Override; Timed Operator Override (TOO); Enable; Disable; Preset Counter; Reset – Pulse Meter, Analog Object, Totalization, Optimal Start (OST); Add Recipient Command and Remove Recipient Command (Notification); Cancel Delay Time (Analog Alarm); Cancel Report Delay (Multistate Alarm); and Clear (Trend).
Diagnostic	Gives the user the following privileges: Latch/Clear Statistics; Analyze Field Bus; Out-of-Service; In Service; Timed Out of Service (TOS).
Manage Item Event	Gives the user the following privileges: Acknowledge, Annotate. Applies to category-based events and allows the user to display an alarm in the Alarms Window (also referred to as Metasys - Events and Alarm Bar).
Manage Energy	Gives the user the following privileges: OST Commands: Start/Stop Meter, Cancel Prestart/Prestop Load Commands: Shed, Release Load, Comfort Override, Release Comfort Override, Lock, Unlock DLLR Commands: Set Mode, Set Target, Reset Profile, Reset Interval, Reset Initialization Parameters
Modify Items	Gives the user the following privileges: Modify Item (cannot add or delete). Commands included: Use GIO to Change Name, Change Units, and Change Display Precision When users modify items, they can only set the Authorization Category property of a modified object to a category for which they have modify access permissions.
Configure Items	Gives the user the following privileges: Add, Modify, or Delete an Item. When users create objects, they can only set the Authorization Category property to a category for which they have configuration access permission.