FMS Security Events

The following tables lists FMS security events (standard and custom) for CygNet Measurement, what security application applies (service and/or Node level), and the minimum authorization level (permission) required to perform associated FMS tasks.

See Events in the Security section for more information about security event authorization in CygNet Software.

See Authorization Levels in the Security section (Permissions topic) for an explanation of security authorization levels in the CygNet ACS.

Standard FMS Security Events

Security Event	Security Event Description	Security Application - Service	Security Application - Node	FMS Task	Minimum Authorization Level *
ACCESS	Access	-	-	View validation and estimation rules	0
-	-	Inclusive	1
	-	Inclusive Create and edit validation rules and estimation rules	2
	-	Inclusive Delete validation rules and estimation rules	3
	-	Inclusive Purge validation rules and estimation rules Delete Nodes and purge records	4
	-	Inclusive Modify administrative options Update database schema FMS Toolbox: GMR Migration FMS Toolbox: Import FMS Internal Database Manager	5
CLOSE	Close period	-	-	None	0
	-	Test close period	1
		Inclusive Edit closed records	2
	-	Inclusive Close period	3
	-	Inclusive	4
	-	Inclusive	5
CMDDEV	Execute device commands	-	-	None	0
-	-	None	1
		Execute the following commands Request Current Configuration Request Data Request Missing Data Request New Data Request Product Data Flow-Cal Request Missing Data (if installed) Export: Flow-Cal Data CFX (if installed) Export: Flow-Cal Ticket Data TFX (if installed) Export: Flow-Cal Transaction Queue (if installed) Export: PGAS Data XML (if installed)	2
		Inclusive Execute the following commands Send Gas Quality Flow-Cal Send Gas Quality (if installed)	3
		Inclusive	4
		Inclusive	5
CMDSYS	Execute system commands	-	-	None	0
-	-	None	1
	-	Execute the following commands Build Reports Export Device Data CSV Export PPAs CSV Export Normalization View Data CSV Generate Smart Groups	2
	-	Inclusive Execute the following commands Import Configuration CSV Import EmersonRoc Laptop File Import Gas Analysis CSV Import Gas Quality CSV Import History CSV Import Totalflow Laptop File Update Normalization Views Estimate Station Data	3
	-	Inclusive Execute the following commands Perform Database Maintenance Archive Data Validate Data	4
	-	Inclusive Configure Extended Command Options: Database Maintenance Retention Periods Detect New Devices Options Smart Group Definitions	5
DEVALA	Edit alarm log records	-	-	None	0
-	-	None	1
-	-	None	2
		Edit an Alarm Log Record (Closed records require additional security)	3
		Inclusive	4
		Inclusive	5
DEVCFG	Edit configuration log records	-	-	None	0
-	-	None	1
-	-	None	2
		Edit a Configuration Log Record (Closed records require additional security)	3
		Inclusive	4
		Inclusive	5
EXCP	Ignore exceptions	-	-	None	0
		Ignore exceptions	1
		Inclusive	2
		Inclusive	3
		Inclusive	4
		Inclusive	5
JOB	Job	-	-	None	0
	-	Precalculate Calibration Data Build Reports: Job Late Job	1
		Inclusive Approve recalculation (manually via Jobs control) Create jobs (manually via Jobs control) Export Completed Jobs Schedule Jobs (run the command)	2
		Inclusive	3
		Inclusive Purge jobs (manually via Jobs control)	4
		Inclusive Configure Extended Command Options: Create job schedules Edit job schedules Delete job schedules	5
NODE	Node	-	-	None	0
		View Node	1
		Inclusive Update Node	2
	-	Inclusive Edit group Node categories	2
	-	Inclusive Create Node Detect New Devices	3
		Inclusive Delete Node or Purge records Purge device data	4
		Inclusive Purge Node	5
PPA	Prior period adjustment	-	-	None	0
	-	Approve contingent PPA	1
	-	Inclusive Reject contingent PPA	2
	-	Inclusive	3
	-	Inclusive	4
	-	Inclusive	5
SVCINFO	Miscellaneous Genserve security management Note: The SVCINFO event allows changes to log settings and use of the GlobalFunctions method SetGenserveInfo without requiring higher privileges on other actions. Other tasks are listed at right.	-	-	None	0
	-	Change queue translations	1
	-	Inclusive	2
	-	Inclusive	3
	-	Inclusive	4
	-	Inclusive Give the CygNet Config File Manager remote access to service configuration files Change log settings Change audit levels Perform on-demand backups Request an activation check	5

Security

Event

Security

Event Description

Security Application

- Service

Security Application

- Node

FMS Task

Minimum Authorization

Level *

ACCESS

Access

View validation and estimation rules

Inclusive

Inclusive
Create and edit validation rules and estimation rules

Inclusive
Delete validation rules and estimation rules

Inclusive
Purge validation rules and estimation rules
Delete Nodes and purge records

Close period

None

Test close period

Inclusive
Edit closed records

Inclusive
Close period

Inclusive

Inclusive

CMDDEV

Execute device commands

None

Execute the following commands

Request Current Configuration
Request Data
Request Missing Data
Request New Data
Request Product Data
Flow-Cal Request Missing Data (if installed)
Export: Flow-Cal Data CFX (if installed)
Export: Flow-Cal Ticket Data TFX (if installed)
Export: Flow-Cal Transaction Queue (if installed)
Export: PGAS Data XML (if installed)

Inclusive
Execute the following commands

Send Gas Quality
Flow-Cal Send Gas Quality (if installed)

Inclusive

Inclusive

CMDSYS

Execute system commands

None

Execute the following commands

Inclusive
Execute the following commands

Inclusive
Execute the following commands

Inclusive
Configure Extended Command Options:

Database Maintenance Retention Periods
Detect New Devices Options
Smart Group Definitions

DEVALA

Edit alarm log records

None

Edit an Alarm Log Record
(Closed records require additional security)

Inclusive

Inclusive

DEVCFG

Edit configuration log records

None

Edit a Configuration Log Record
(Closed records require additional security)

Inclusive

Inclusive

EXCP

Ignore exceptions

None

Ignore exceptions

Inclusive

Inclusive

Inclusive

Inclusive

JOB

Job

None

Job
Late Job

Inclusive
Approve recalculation (manually via Jobs control)
Create jobs (manually via Jobs control)
Export Completed Jobs
Schedule Jobs (run the command)

Inclusive

Inclusive
Purge jobs (manually via Jobs control)

Inclusive
Configure Extended Command Options:

NODE

Node

None

View Node

Inclusive
Update Node

Inclusive
Edit group Node categories

Inclusive
Purge Node

PPA

Prior period adjustment

None

Approve contingent PPA

Inclusive
Reject contingent PPA

Inclusive

Inclusive

Inclusive

SVCINFO

Miscellaneous Genserve security management

Note: The SVCINFO event allows changes to log settings and use of the GlobalFunctions method SetGenserveInfo without requiring higher privileges on other actions. Other tasks are listed at right.

None

Change queue translations

Inclusive

Inclusive

Inclusive

Inclusive
Give the CygNet Config File Manager remote access to service configuration files
Change log settings
Change audit levels
Perform on-demand backups
Request an activation check

*Note: When changing security levels for a security event, security will be effective after making the change, but you will need to restart FMS Explorer for the changes to take effect for that client.

Custom FMS Security Events - Data Quality

A system administrator can also optionally control which users can save or edit records, based upon the data quality of the records. To determine who can modify records that have an attached data quality flag (gas device & gas station), administrators have the ability to create customized security events. Each data quality record will have a corresponding configured security event. Users must have a minimum access level to save records to the specified data quality, and must have a higher access level to edit records with the specified data quality. See Data Quality for more information about this concept.

The customized data quality security events are described in the table below.

Security Event	Security Event Description	Security Application - Service*	Security Application - Node*	FMS Task	Minimum Authorization Level *
<custom>	Gas device records	-	-	None	0
-	-	None	1
-	-	None	2
		Save a Gas Device record to a specific gas quality (Closed records require additional security)	3
		Inclusive Edit a Gas Device record at a specific gas quality (Closed records require additional security)	4
		Inclusive	5
<custom>	Gas station records	-	-	None	0
-	-	None	1
-	-	None	2
		Inclusive Save a Gas Station record to a specific gas quality (Closed records require additional security) Via script, save a Gas Station record to a specific gas quality (Closed records require additional security)	3
		Inclusive Edit a Gas Station record at a specific gas quality (Closed records require additional security)	4
		Inclusive	5

Security Event

Security Event Description

Security Application - Service*

Security Application - Node*

FMS Task

Minimum Authorization

Level *

<custom>

Gas device records

None

Save a Gas Device record to a specific gas quality
(Closed records require additional security)

Inclusive
Edit a Gas Device record at a specific gas quality
(Closed records require additional security)

Inclusive

<custom>

Gas station records

None

Inclusive
Save a Gas Station record to a specific gas quality
(Closed records require additional security)
Via script, save a Gas Station record to a specific gas quality
(Closed records require additional security)

Inclusive
Edit a Gas Station record at a specific gas quality
(Closed records require additional security)

Inclusive

*Note: When changing security levels for a custom data quality security event, security will be effective after making the change, but you will need to restart FMS Explorer for the changes to take effect for that client.