AdvanTrol-Pro

User Authority Software

User Manual

IM40S46-E
 Notices

 The reproduction, transmission or use of this document or its contents is not permitted without express
written authority.

 Information and specifications in this document are subject to change without notice.

 While information in this document is well edited and checked, mistake or omission may exist. Please
don’t hesitate to contact SUPCON if you have any question about this document.

 Please contact SUPCON via email "[email protected]" if you have any question.

Trademarks

Trademarks or marks SUPCON, SPlant, Webfield, ESP-iSYS, MultiF, InScan, SupField are all registered,
registering or using by Zhejiang SUPCON Technology Co., Ltd., which owns the properties of all trademarks or
marks above. Without the written authority from Zhejiang SUPCON Technology Co., Ltd, no individual or
company shall use any trademarks or marks above. We reserve the right to take legal action for any individual or
company using trademarks or marks above illegally.

Symbol Definition

WARNING: Indicates information that a potentially hazardous situation which, if not avoided, could
result in serious injury or death.

RISK OF ELECTRICAL SHOCK: Indicates information that Potential shock hazard where
HAZARDOUS LIVE voltages greater than 30V RMS, 42.4V peak, or 60V DC may be accessible.

ESD HAZARD: Indicates information that Danger of an electro-static discharge to which

equipment may be sensitive. Observe precautions for handling electrostatic sensitive devices

ATTENTION: Identifies information that requires special consideration.

TIP: Identifies advice or hints for the user.

 Table of Contents

Table of Contents

User Access Software ..................................................................................................................1

Section 1 Function Overview.......................................................................................................1

Section 2 Start Software...............................................................................................................1

2.1 Create Configuration in SCKey .........................................................................................1

2.2 Start User Authority Management Software.......................................................................2

Section 3 Manage Users ..............................................................................................................4

3.1 Add User............................................................................................................................5

3.2 Edit User Properity ............................................................................................................6

Section 4 Manage Role ................................................................................................................7

4.1 View Role ..........................................................................................................................7

4.2 New Role...........................................................................................................................8
4.3 Configure Role Priority ....................................................................................................10
4.3.1 Configure Basic Priority.........................................................................................10
4.3.2 Configure Function Authority .................................................................................10
4.3.3 Configure Data Authority ....................................................................................... 11
4.3.4 Configure Special Tag Authority.............................................................................14
4.3.5 Configure Operation Team Authority .....................................................................17

Section 5 Compile ......................................................................................................................18

Section 6 Application Example..................................................................................................19

Section 7 Data Version Instruction............................................................................................28

1
 User Access Software User Manual IM40S46-E

User Access Software

Section 1 Function Overview

User authority software is used to configure user information. Its main functions are shown below:

 Each user associates a role.

 All authorities of user come from its associated role.

 Role priority of user comes from its role in list.

 There are 8 levels for role: operator-, operator, operator+, engineer-, engineer, engineer+,
privilege-, privilege.

 Role authority includes function authority, data authority, special tag and operation team
authority.

 Only super user “admin” can set user authority, other users have no modification
authority. Engineer and users above can modify the passwords of themselves. The user
priority of “admin” is privilege+, which has the highest authority, its default password is
“supcondcs”.

Section 2 Start Software

2.1 Create Configuration in SCKey

Start SCKey and click “Create” to pop up the “User Login” dialog. In the initial status, each
configuration has a super user “admin”, whose initial password is “supcondcs”. Click “Login”
and go to the SCKey configuration window.

1
 User Access Software User Manual IM40S46-E

Figure 2-1 Create Configuration Window

2.2 Start User Authority Management Software

After entering the SCKey Configuration Software, select icon in the SCKey toolbar to enter
the User Authority Management Software as shown in the Figure below.

2
 User Access Software User Manual IM40S46-E

Figure 2-2 Access Control Configuration Interface

 Menu Bar

 File: used to “Open”, “Save” .SCS file and “Exit”.

 Edit: provide edit function, including “Wizard”, “Add”, “Delete”, “Administrator
Password” and “Compile”.
 View: used to show or hide “Authority Tree”, “Compile Information”, “Toolbar”
and “Status Bar”.
 Help: provide online help and the version and copyright for user authority
configuration.

 Toolbar

 Open: open the user management file of each configuration to configure user
authority.
 Save: save the modified information.
 Wizard: add user in wizard mode.
 Add: select different roles in the authority tree and add different contents. For
example, select “User List” and click “Add” to add new user, select “Role List”
and click “Add” to add new role.
 Delete: select different roles in the authority tree and delete different contents. For
example, a single user, role or custom authority can be deleted.
 Administrator Password: modify the password of super user “admin”.
 Compile: only compile the user information.

3
 User Access Software User Manual IM40S46-E

 About: provide the version and copyright information of SCSecurity.

 Authority Tree

 User List: contain all users in the configuration.

 Role List: contain all roles in the configuration user. Single role in the role list has
function authority, data authority, special tag, custom authority, operation team
authority and user list.

 Information Display Area

Show the information of the selected item in authority tree, including user list, single user,
role list, single role, role data authority, role function authority, role special tag authority,
role operation team authority and all custom authority list.

 Compile Information
Show the error or success information of last compilation.

 User Login Information

 Show current login user, which is same with the login user in SCKey.

Section 3 Manage Users

After clicking the User List in the authority list, the right information area will display all users in the
configuration. The “Operator” in the “User (Operator)” means that the level of the associated role
of User1 is Operator as shown below.

Figure 3-1 User List Display Interface

4
 User Access Software User Manual IM40S46-E

3.1 Add User

When the logged in user is the admin or other user with privilege, user can be added through the
following steps.

1. Select “User List” in the Authority List.

2. Users can be added through the following commands.

 Select “Add” command in the right click menu, a user named “NewuserN” will be
automatically added, where N is the serial number for adding the user. The
automatically added user has the observer authority.
 Select “Wizard” in the right click menu, the following dialog box will be popped up as
shown below.

Figure 3-2 “Add User” Dialog Box

3. Configure the user according to the following prompts.

Input the User Name of the new user in the “User Name”.
Select associated role of the new user in the drop-down box of the “Associated Role”.
Input description information of new user in the “Description”.
Input password of new user in the “Password” and “Confirm Password”. Ensure that
contents inputted in the two text boxes are the same.

4. Click “Add” to complete creation of new user.

5
 User Access Software User Manual IM40S46-E

3.2 Edit User Properity

After clicking a user in the Authority List, the right information area will display some specific
information of the user, including user information and role associated information as shown in the
Figure 3-3:

Figure 3-3 User Information Display Interface

Through the following steps, the User Name, Password, Description and Role Associated
Information can be modified.

1. The User Name shall be comprised of numbers, letters, or underscores. If the modified
User Name fails to meet requirements or conflicts with the existing user, the User Name
will be automatically restored to the original User Name.

2. When modifying the password, Users only need to select the password item and the
button will appear. After clicking button, the password modification dialog box will be
popped up as shown in the Figure below.

6
 User Access Software User Manual IM40S46-E

Figure 3-4 Password Modification Dialog Box

Input user password in the “New Password” and “Confirm Password”. The password is a
character string with the length range less than 64 characters.

3. When the logged in user is admin or other user with privilege, select one role in the
drop-down box of the “Role” as the user’s associated role. The user’s permission is the
same as the associated role permission.

Tips:

 The users at the Engineer Level and above can modify their own passwords.

 When the logged in user is not admin or other user with privilege authority, the “Role”
of the user cannot be modified.

In addition, select users to be deleted in the Authority List and select “Delete” command in the right
click menu to delete users.

Section 4 Manage Role

This section mainly introduces Add Role, Configure Role Attributes and other contents.

4.1 View Role

In the Authority List, after clicking the “Role List”, the information area displays all role information
in this configuration as shown below.

7
 User Access Software User Manual IM40S46-E

Figure 4-1 Role List Display Interface

 “Engineer” in the “Role (Engineer)” means the corresponding role level.

 The role name can be modified. If the role name fails to meet requirements, the original
name will be automatically restored.

 It goes by default that there are “Engineer” and “Operator” roles in the new configuration
and the levels are “Engineer” Level and “Operator” Level respectively. The operation
team permission is blank and other permissions are configured by default.

4.2 New Role

New role can be created through the following steps.

1. Select “Role List” in the Authority List.

2. Add Role through the right click menu.

Select “Add” in the right-click menu, new role under the “Role List” will be added. The
new role is “New Role n” by default, where n is the serial number of the new role.

3. Select “Wizard” in the right-click menu, “Add User” dialog box will be popped up as
shown in the Figure below.

8
User Access Software User Manual IM40S46-E

Figure 4-2“Add User” Dialog Box

4. Input name of the new user in “User Name”. Then, after clicking “Add” behind
"Associated Role", the “New Role” dialog box will be popped up.

Figure 4-3 “New Role” Dialog Box

5. Configure New Role according to the following prompts.
Input the role name in the “Name” text box of the “New Role” dialog box, select the role
priority in the drop-down list of the “Level” and input role description information in the
“Description” text box.

6. After completing configuration, click “OK” to go back to “Add User” dialog box.
After clicking “OK” in the “Add User” dialog box, new role will be added in the “Role List”.

9
 User Access Software User Manual IM40S46-E

4.3 Configure Role Priority

This section mainly introduces Role Priority configuration methods, including Role Basic Attributes,
Function Permission, Data Permission, Special Tag, Operation Team Permission and the
Subordinate User.

4.3.1 Configure Basic Priority

After clicking a Role in the Permission Tree, the right information area will display the role
information as shown below:

Figure 4-4 Individual Role Information Display Interface

The basic attributes of the role can be configured according to the following steps.

1. After clicking a role in the Permission Tree, specific information will be displayed on the
right side, including the Role Name, Role Description and the User Level.

2. The Name, Description and Role priority can be modified. If the modified role name fails
to meet requirements, the original name will be automatically restored.

3. The role priority can only be selected from the dropdown list. Given different priority, the
associated users have different permissions.

4.3.2 Configure Function Authority

After selecting the function authority of a role in the Authority List, the right information area will
display all function permissions of this role. Those checked mean the permissions of the role

10
 User Access Software User Manual IM40S46-E

(different roles have different default permissions) as shown in the Figure 4-5 below.

Figure 4-5 Function Permission List Interface

 The role function authority can be modified by checking the authority in the function list.

 When selecting the role priority, the program will prompt whether to modify the user
priority. If Yes is selected, then the function permission of corresponding priority will be
assigned to the role, namely modifying the function authority to the one corresponding to
the priority; Otherwise, the user priority will be kept to original.

Attention:

Role at the “Operator” and above can configure the authority of “Switch to Observe” and
“Alarm Silence” in the “Other Authority List”.

4.3.3 Configure Data Authority

Click “Data Authority” in “Authority Tree”, all data groups and regions in the configuration will
be shown in the information display area in right.

11
 User Access Software User Manual IM40S46-E

Figure 4-6 Data Authority Configure Interface

All authorities are set in the data region, including “Tag Operation Priority”, “Enable Tag”, “All”,
“Modify Data”, “Acknowledge Alarm”, “Authority to Modify Alarm and Data”, “Modify Alarm Limit”,
“Adjust PID”, “MV”, “SV” and “Man/Auto Switching”.

 Tag Operation Priority: including “Privilege”, “Engineer”, “Operator” and “Read-only”. The
default authority of new data region is “Privilege”.

 Read-only: in default, all users cannot operate the tag in the region.
 Operator: all tags with “Operator” priority in the group and region can be operated.

Figure 4-7 Custom tag can be operated by operator priority

12
User Access Software User Manual IM40S46-E

Figure 4-8 AI tag can be operated by operator priority

 Engineer: all tags with “Operator” and “Engineer” priorities in the group and
region can be operated.
 Privilege: all tags with “Operator”, “Engineer” and “Privilege” priorities in the
group and region can be operated.

 Enable Tag: actual value of the enable tag reflects the validity of authority. When the
value of tag is true, the 5 authorities’ settings below will become effective. When the tag
is empty, it will not become effective. Enable tag is better be digital.

 All: select all or none of the authorities below.

 Modify Data: authority to modify the value of corresponding tag.

 Acknowledge Alarm: authority to acknowledge corresponding tag alarm.

 Authority to Modify Alarm and Data: enable authority generated by alarm, and modify
enable authority of tag value.

 Modify Alarm Limit: limit modified authority for over-limit alarm.

 Adjust PID: authority to adjust PID of the corresponding tag in tuning window.

 MV: authority to adjust MV of the corresponding tag in tuning window.

 SV: authority to adjust SV of the corresponding tag in tuning window.

 Man/Auto Switching: the man/auto switch authority adjusted for the corresponding tag
value.

Tips:

 “All” can be used to select all or none of the following 5 authorities, which is easy for

13
 User Access Software User Manual IM40S46-E

operation.

 0 region of each data group has default authority for each role and cannot be
modified.

 Data group and region are same with that of the extended configuration.

4.3.4 Configure Special Tag Authority

If the role has no operation authority for a certain data group (or region), while needs the operation
authority for some tags in the group (or region), these tags can be set as special tags and
configured with operation authority as required. Or if the role needs to cancel the operation
authority of some tags in the data group (or region) with operation authority, these tags also can be
set as special tags and configured with operation authority as required.

Precedure
1. Click a special tag of a role in “Authority Tree”, right-click and select “Add”, as shown
in Figure 4-9.

Figure 4-9 Add Special Tag

2. After popping up the tag selector, select tags that need to be set to be “Special Tag”.

3. Tags selected will be displayed below the “Special Tag List” in the right information area.
Click “+” to unfold tags and display operable authority of the tag such as shown in the
Figure 4-10 below.

14
 User Access Software User Manual IM40S46-E

Figure 4-10 Special Tag List Interface

4. The tag can be set by the user operation authority item of the role. Setting method is
similar with the role data authority setting in Configure Data . As shown in Figure 4-10, if
the “Enable Tag” is empty, when judging the (role) user authority item, judging the actual
value of “Enable Tag” will be skipped to judge the real authority directly. When judging
whether a (role) user has operation authority for a certain tag, check if the tag is special
tag first. If it is, judge according to the set authority in “Special Tag”. Otherwise, judge
according to the authority set in corresponding data region (group).

Configuration Example

For example, to achieve a flow tag (PI_01) in the authority of operator, reset operation cannot be
executed for accumulation quantity.

1. Right-click “Special Tag” from the “Role List” and select “Add”.

2. Pop up the “Display tag” dialog and select “AI01000000”, as shown in Figure 4-11.

15
User Access Software User Manual IM40S46-E

Figure 4-11 Select tag

3. Unselect the “Modify Data” box of “AI01000000”, and select other authorities as
required, as shown in Figure 4-12.

16
 User Access Software User Manual IM40S46-E

Figure 4-12 Special tag authority setting

4. Follow the setting methods above, and accumulation value of the tag will not be able to
modify in monitoring.

4.3.5 Configure Operation Team Authority

Through defining the operation team authority of the role, whether the role has authority to access
to the designated operation team can be specified. The specific operation steps are as follows:

1. Select “Role List > Role Name (as Engineer in the following Figure)> Operation Team
Permission” in the Authority Tree.
All operation teams configured are listed in the operation team authority list such as
“TEAM001” as shown in the following Figure.

Figure 4-13 Operation Team Authority List Configure Interface

2. Check the operation team associated with the role in the operation team list.

Tips:

 Each Role is at least associated with one operation team, Otherwise, compiling will be
wrong.

 Admin User is associated with all operation team by default and cannot be modified.

Manage Users in the Role

17
 User Access Software User Manual IM40S46-E

Select “Role List > Role Name (As the Engineer in the Figure Below)> User List” in the Permission
Tree to view the configured users of the Role.

Figure 4-14 Corresponding User List Interface of the Role

As shown in the Figure above, currently, Role “Engineer” has only one user “User2”.

In addition, users can be added and deleted according to the following steps.

 Select “Role List > Role Name (As the Engineer in the figure above)> User List” in the
Authority Tree and select “Add” in the right-click menu to add User. Refer to “Edit User
Priority” for details, no more detailed description here.

 Select “Role List > Role Name (As the Engineer in the figure above)> User List” in the
Authority Tree, and select “Wizard” in the right-click menu to add User and Role.

 Select “Role List > Role Name (As the Engineer in the figure above)> User List” in the
Authority Tree and select “Delete” in the right-click menu to delete the users selected in
the Role User List.

User List has listed all users corresponding to the Role. New User, Delete User, Modify User
Information can be operated according to the similar method for configuring the Access Control.

Section 5 Compile
After configuring the Access Control, the configuration needs to be compiled.

Click in the Toolbar or select “Edit > Compile” in the Menu Bar. The compilation information of
the configuration will be displayed in the “Compile Information” Window as shown in the Figure
below.

18
 User Access Software User Manual IM40S46-E

Figure 5-1 “Compile Information” Display Area Figure

If there is error message in the compilation information, please modify the configuration according
to the error message.

Section 6 Application Example

Execute user access configuration according to the following requirements:

 Create a new user, whose user name is “User1” , password is “supcondcs” and
description is “New User 1”.

 Create a new role, whose role name is “New Engineer”, role priority is “Engineer-” and
description is “New Engineer 1”.

 Set all function authorities for the new engineer.

 Set all data authorities for the new engineer, and set enable tag.

 Set the special tag authority for the new engineer.

 Set the operation team authority for the new engineer.

Follow steps below to configure.

1. Create a new configuration, click in the toolbar of SCKey, to pop up the

“SCSecurity” interface.

19
User Access Software User Manual IM40S46-E

Figure 6-1 Access Control

2. New User and Role.

Click the wizard button in the toolbar to pop up the “Add User” dialog. Input the
user name as “User1”, password as “supcondcs” and description as “New User”. As
shown in figure below.

Figure 6-2 Add User

1) Click button behind "Associated Role" to associate a new role with the new user,
a “New Role” dialog will pop up. Input the name as “New Engineer”, priority as

20
User Access Software User Manual IM40S46-E

“Engineer-” and description as “New Engineer1”, as shown in figure below.

Figure 6-3 New Role

2) After successfully creating New User and Role, list New User and Role in the User List
and the Role List as shown in the Figure below.

Figure 6-4 User Permission Interface after New User and Role

After creation, Name, Password, Description and Role associated information of

Individual User can be modified (refer to “Edit User Attributes” for operation methods) and
Name, Description and User Authority of Individual User can also modified (refer to “New
Role” for operation methods).

3. Configure function permissions of the “NewEngineer”.

1) Select the “Function Authority” of the new engineer in the “Authority tree”, its
function authority will be shown in the information display area. As shown in figure below.

21
User Access Software User Manual IM40S46-E

Figure 6-5 NewEngineer User Function Authority

2) Role priority assigns corresponding function authority for priority. If a function authority of
role is not selected (such as system configuration), a prompt shown in figure below.

Figure 6-6 Role function authority prompt

Click “OK” to assign the role with the function authority. Click “Cancel” will undo the
selection. Interface after adding the function authority for new engineer role is shown
below.

22
User Access Software User Manual IM40S46-E

Figure 6-7Add Function Authority to NewEngineer

4. Configure data authority of “NewEngineer”.

Select data authority of the NewEngineer in the Authlority Tree. The right information
display area displays the data authority of the Role as shown in the Figure below.

Figure 6-8 Junior Engineer User Data Permission

1) Set data authority for the default region of default group. Click the drop-down box of “Tag
operation priority”, as shown in figure below.

Figure 6-9 Set Tag Operation Priority

2) Click enable tag, click to pop up the “Display tag” interface, as shown below. Select

23
User Access Software User Manual IM40S46-E

the enable tag as condition and click “OK”.

Figure 6-10 Select enable tag

3) Select “All” to select all data authorities of the data region. The configured data authority
is shown below.

24
User Access Software User Manual IM40S46-E

Figure 6-11 Set Data Authority

5. Configure special tag of the role.
Select the special tag of the NewEngineer in the authority Tree. The right information
display area displays the special tag of the role as shown in the figure below.

Figure 6-12 special tag

1) Select “Special Tag” in the “Authority Tree” and “Add” command in the right-click menu,
“Display Tag” dialog box will be popped up as shown in the Figure below.

25
User Access Software User Manual IM40S46-E

Figure 6-13 Special Tag Selection

2) After selecting special tag “AI01000001” in the “Display Tag” dialog box, the information
display area is as shown in the Figure below.

26
User Access Software User Manual IM40S46-E

Figure 6-14 Information Display Area after Adding Special Tag

The method for setting the special tag authority is similar to that in the data region.
Multiple special tags can be added.

6. Configure “Operation Team Authority” of the Role.

Select “Operation Team Authority” in “Authority tree”, and all operation teams will be
shown in the information display area, as shown below.

Figure 6-15 Operation Team Permission

The operation team authority list of each role lists all configured operation teams, user
can select one allowed to be accessed by role. Each role should associate one operation
team at least, otherwise, compiling error will be generated. Select the operation team to
be associated, and a check box will show up. Select the check box to associate the
operation team with role. As shown below.

Figure 6-16 Operation Team Permission Setup

27
 User Access Software User Manual IM40S46-E

7. Configure the users of the role.

Select the User List of the Junior Engineer in the Permission Tree and the right
information display area will display all users corresponding to the role as shown in the
Figure below.

Figure 6-17 User List

Name, Description and Password can be respectively selected to modify the user
information. Also, User can be added and deleted here. After selecting the User List in
the Permission Tree, click the button in the Toolbar or [Edit/Add] command, or select
Add in the right click menu command to add a user below the role. The Role List after
adding a user is as shown in the Figure below. The user information can be modified.

Figure 6-18 Add User

Section 7 Data Version Instruction

Table 7-1 Version Update and Change Data Viewer Table

Data Version Applicable Product Model Change Instruction

V1.0(20130613) AdvanTrol-Pro V2.65 The first version.
V1.1(20161020) AdvanTrol-Pro V2.65 Add code.

28
 User Access Software User Manual IM40S46-E

Data Version Applicable Product Model Change Instruction

Adjust manual structure
Delete custom permissions list
V1.2(20180803) AdvanTrol-Pro V2.80.00.02-E
Delete the custom permissions of the
Role

29