Commissioning Instructions

ABT-SSA (Setup & Service Assistant)
User and session management
2
44 | 76
Siemens
A6V10429119_en--_a_07
Building Technologies
2018-12-19
2.6.1 Managing user profiles and user roles
User profiles for ABT-SSA devices can be managed offline, through ABT Site, or online, through a Web
browser.
Offline user profile management through ABT Site
User profile management through ABT Site offers maximum flexibility and variability.
● ABT Site must be used for advanced user management tasks, such as adding roles or setting the default
work area for a user profile.
● Once the user profiles and user roles are defined in an ABT Site project, the configuration must be
downloaded to individual automation stations and operating and monitoring devices.
Online user profile management through a Web browser
User profile management through a Web browser provides basic user management functionality.
● If an ABT Site project configuration is downloaded to the automation station, the device contains the user
names and user roles that correspond to the Users and Roles in the ABT Site User profiles task.
● If an ABT Site project configuration has never been downloaded to the automation station, the following
apply:
– The device contains the Administrator default User name. You can use other User names when creating
new user profiles.
– The device contains the following set of User roles for creating new user profiles:
Administrators
Advanced engineers
Standard engineers
Advanced operators
Standard operator
Technical operators
● For the default Administrator user profile, the User name and User role fields cannot be modified and the
profile cannot be deleted.
● The user profile for the currently logged in user cannot be deleted.
● If access to the Web-based interface is locked by failed login attempts, you must delete and re-add the user
profile in either ABT-SSA or the Operation application. This does not affect the ABT Site user profile.
Default user role
Technical Operators is the default user role in ABT-SSA and the Operation application.
● This role is allowed to operate all datapoints without having access to other applications.
● This role is allowed to view the generic datapoint view in the Setup & Service Assistant.
– The Settings folder is empty.
– All other applications, such as Assigned Devices and Installation, are disabled.
2.6.2 Managing password security
Note
Password security must be managed through ABT Site.
Valid entries for passwords used in ABT-SSA and the Operation application are managed through the following
fields in ABT Site Settings > User profile > Common settings:
● Block time on failed login
● Failed login attempts
● Min password length
● Password policy