Planning Security

A security plan identifies which users can perform which tasks in the system. To develop a security plan:

1. List all of the tasks for each service for which you want to implement security. For example, sending commands to devices, deleting records, and modifying point configurations.
2. List the individuals and groups in the company.
3. Cross reference the two lists to identify which users can perform what tasks.
4. Look up the names of the Applications and Events in the Security Reference section.
5. Add the permissions to the ACS.

By default, security is open for all Events except ODBC events. The easiest way to implement security is by taking an exception approach. You can do this by changing the default authorization levels to 1 - Read for all users/groups for all Events, and then granting explicit users/groups access for specific Events.

More:

Security Example