Operation Indication Symbols; Authorization - Hitachi Relion 670 Series Operation Manual

Section 4
Overview
4.1.4.6

Operation indication symbols

4.2

Authorization

User roles with different user rights are predefined in the IED. It is recommended to use user defined
users instead of the predefined built-in users.
The IED users can be created, deleted and edited only with PCM600. One user can belong to one or
several user roles. By default, the users in Table
the predefined roles from Table
Table 10:
User name
SuperUser
Guest
Administrator
Table 11:
User roles
VIEWER
OPERATOR
ENGINEER
INSTALLER
SECADM
SECAUD
RBACMNT
ADMINISTRATOR
30
11 can be used.
At delivery, the IED user has full access as SuperUser until users are created with PCM600.
Default users
User rights
Full rights, only presented in LHMI. LHMI is logged on by default until other users are defined
Only read rights, only presented in LHMI. LHMI is logged on by default when other users are defined
(same as VIEWER)
Full rights. Password: Administrator. This user has to be used when reading out disturbances with
third party FTP-client.
Predefined user roles according to IEC 62351-8
Role explanation User rights
Viewer
Operator
Engineer
Installer
Security
administrator
Security auditor
RBAC
management
Administrator
rights
Changes in user management settings do not cause an IED reboot.
© 2017 - 2023 Hitachi Energy. All rights reserved
10 are created in the IED, and when creating new users,
Can read parameters and browse the menus from LHMI
Can read parameters and browse the menus as well as perform control
actions
Can create and load configurations and change settings for the IED and also
run commands and manage disturbances
Can load configurations and change settings for the IED
Can change role assignments and security settings. Can deploy certificates.
Can view audit logs
Can change role assignment
Sum of all rights for SECADM, SECAUD and RBACMNT
This User role is vendor specific and not defined in IEC
62351–8
1MRK500127-UUS Rev. M
GUID-981A881D-9229-45E8-9EE5-D6DF2CA457E5 v6
670 series
Operation manual