System information

FCD 901 48
Issue R2A, 07.2009
XMP1 Release 5.5 System Description
Safety
Aastra Proprietary Information Page 6-15
Authorization
Authorization means that the program identifies as to which authorizations
a user has and which actions the individual users may execute.
Note: The user identity detected within the Windows
authentication process is used by the SOX Server and SOX
Database as basis for the authorization check.
The user authorizations are always verified in the Database Server
independently of the authorization check performed in the SOX Server.
For the SOX Server, an authorization check can be configured optionally by
means of the Microsoft Authorization Manager (AzMan). The default setting
does not provide such an authorization check for the SOX Server.
SQL Database Server
For each action, the SQL Database Server checks as to which authorization
the corresponding user has for an SOX Database. In a SOX Database, four
roles with predefined authorizations are already configured.
These roles will then be assigned users or groups.
In case of an access to the Database Server, this assignment is used to
check the user’s authorization.
SoXReadOnly The user has read-only access to the Database.
SoXAlarmAcknowledge The user can also acknowledge alarms.
SoXAlarmOperator The user can also delete alarms and performance data.
SoXConfigurator The user can also change the configuration.
DB Server
Authorization
-SoXReadOnly
-SoXAlarmAcknowledge
-SoXAlarmOperator
-SoXConfigurator
DB1
DB2