×

Have You Seen Workflow Lately? Click here to check out all the new features in the latest version.

Supercharge your GE solution! Download a free trial of Proficy Operations Hub, CSense analytics, and more. Learn more about the Proficy 2024 releases, by signing up for one of our upcoming events.

Home
Security
Domain-Based Security
Windows Domain-Based Security
You can use Windows domain user accounts to manage access to and within Workflow. You can also configure domain user accounts for automatic login on either a global basis or for individual computers.
Key Sets
Key sets are groups of permissions, based on areas of operation within your facility, that define the operations a group of users can perform.
Add key sets to a workstation for a group
This procedure guides you through the task of adding key sets to workstations at the global, equipment resource, and solution display levels. Only the access path is different.

Workflow Products Documentation

Security
- Security Overview
- Users and Groups
- Domain-Based Security
  - Windows Domain-Based Security
    You can use Windows domain user accounts to manage access to and within Workflow. You can also configure domain user accounts for automatic login on either a global basis or for individual computers.
    - Windows Domain Users Logging into Workflow
      If you are using Windows user names and passwords within Workflow security, be aware that Windows user accounts must have the policy Access this computer from the network applied under the local security policy. By default, this policy is assigned to the groups Users and Everyone on the local machine.
    - Authenticate Windows Domain Users for Vision Calls
      Vision uses a token to make a secure call. For Windows authentication, the Proficy STS service needs to query the domain controller to retrieve groups that the user belongs to. This group information is used to validate the Windows user.
    - Password Expiration Considerations
      When Workflow security is synchronized with Windows security, passwords can expire.
    - Configuring Domain-Based Access Control to Workflow Functionality
      You can use active directory universal or global groups to control access to Workflow functionality.
    - Key Sets
      Key sets are groups of permissions, based on areas of operation within your facility, that define the operations a group of users can perform.
      - Assign permissions to a key set
        Use the Security Editor to assign permissions to key sets.
      - Edit or view a resource for a key set
        Use the Security Editor to view or edit key sets that a user has inherited from the parent group(s).
      - Add workstations to key sets for a group
        This procedure guides you through the task of adding workstations to keys sets at the global, equipment resource, and solution display levels. Only the access path is different.
      - Add key sets to a workstation for a group
        This procedure guides you through the task of adding key sets to workstations at the global, equipment resource, and solution display levels. Only the access path is different.
      - View all key set permissions for a group
      - Key Set Assignment Examples
        Workflow security is location-based; that is, you assign permissions to a personnel group based on equipment locations and workstations within your facility. Security is a combination of permissions (key sets), plus workstation(s), plus location, and this combination is assigned to a group.
      - Key Set Permissions (Security Editor)
        The Security Editor provides the ability to configure the permissions for your key sets, as well as for the default key sets.
      - Key Set and Workstation Assignments
        Workflow security is location-based; that is, you assign permissions to a personnel group based on equipment locations and workstations within your facility. Security is a combination of permissions (key sets) plus workstation(s) plus location, and this combination is assigned to a group.
    - Login and Logout Capabilities
      Workflow access can be configured in multiple ways. You can configure automatic login and logout on individual computers, on all computers in your system, or on a subset of computers in your system. You can also retain manual login and logout on a global basis or on specific computers.
    - Workflow User Password Security
      Administrator users have the ability to make changes to the security settings in Workflow, including configuring lockout thresholds, re-enabling locked out user accounts, configuring password complexity, and determining whether or not users can change their passwords.

Add key sets to a workstation for a group

This procedure guides you through the task of adding key sets to workstations at the global, equipment resource, and solution display levels. Only the access path is different.

Procedure

Access the Security Editor.
In the Select a Group area, select the group you want to assign key sets to.
Select the Edit by Workstation option.
In the Edit by Workstation area, under the workstation you want to assign a key set to, click Add Key Set.

Tip: You can also add key sets for all workstations.

The Universal Browser appears.
Select the key set you want to add to the workstation for the selected group, and then click OK.

Tip: You can remove a key set from a workstation by selecting the key set you want to remove, and then clicking Remove Key Set. However, you cannot remove a key set from the group if you assigned it directly to the group through the Personnel model.
Optional: Repeat step 4 for each key set you want to add to a workstation for this group.
Optional: Repeat steps 3-6 for each group and workstation you want to add key sets to.
When you are finished adding key sets, click Save.