Operator Functionality Control (Disallow Download, Allow Upload, Disallow DeltaV Operate Configure)

Here is my challenge, I would like the operators environment to...

1) Not have Download functionality, but have Upload functionality.

2) Not be able to get to "DeltaV Operate Configure" via "Ctrl-w" or Quick edit.

So far, this is what I learned.

1) You can change the Function Security of "DOWNLOAD_CONFIG" in DeltaV Explorer to a lock the operator does not have, which protects downloading a single module, which is good.

2) The "UPLOAD_CONFIG" is set to a lock that they do have, so that is good.  Now they can Upload but not Download.

3)  When I change "CHANGE_CONFIG_DB" to a lock they do not have, it takes away the "quick edit" and "ctrl-w" which is good, but I loose "UPLOAD_CONFIG" as well.

Any ideas would be appreciated.

  • UPLOAD_CONFIG and CHANGE_CONFIG_DB locks should be different.

    UPLOAD_CONFIG lock should be operator key (most of the time "control").

    CHANGE_CONFIG_DB lock should be non-operator key (try using "Can Configure")

    I hope this information helps you. If not, contact support team.
  • In reply to Mahesh Gogade:

    Mahesh,

    Thank you for the response, my current settings are as follows.

    DOWNLOAD_CONFIG changed to "System_Admin"
    UPLOAD_CONFIG set to default of "Can Configure"
    CHANGE_CONFIG_DB set to default of "Can Configure"

    User has "Can Configure" lock assigned.
  • In reply to Lance Dusing:

    If user (Operator) has "Can Configure" lock assigned then set CHANGE_CONFIG_DB lock to "System_Admin" (or whichever lock not assigned to the user ).

    So that, user will have access to only UPLOAD_CONFIG function.
  • In reply to Mahesh Gogade:

    That is my issue, if I change CHANGE_CONFIG_DB to "System_Admin", I loose the ability to upload.
  • In reply to Lance Dusing:

    Then please check with global support centre (GSC).
  • In the process of uploading you are changing the configuration database and you will need to have this privilege so your request can't be supported.

    In my opinion it is a risky proposition to allow an operator to upload and have he/she only select the items to upload properly. This upload list is most of the time very big depending on how long the system has been running and how many changes (SPs, Modes, etc) have been made. This will get a bit easier with v14 with the new Upload behavior of configuring only what can be uploaded but I still think that most operators don't know enough about the DeltaV configuration, parameter names and what they do to know what to select for upload.