### Privilege sets A privilege set is a group of one or more privileges. The Administrator creates privilege sets and assigns them to operators and operator groups.
Click for details below Privileges To add or edit a privilege set To delete a privilege set
#### Privileges
This privilege... | allows an operator to...
--- | ---
System Administration Privilege | Add, edit, and delete operators, operator groups, and privilege sets. Update the WebCTRL® system with service packs and patches. Register the WebCTRL® software. See To register your WebCTRL® software. Enable and set up advanced security features such as location-dependent operator access. Add and remove WebCTRL® add-ons such as EnergyReports.
This Access privilege... | allows an operator to access (but not edit)...
--- | ---
Access Geographic Locations | pages from the Geographic tree.
Access Network Items | pages from the Network tree.
Access Groups | pages from the Schedule Groups tree.
Access Config Items | pages from the System Configuration tree.
Access Alarms | alarms.
Access Logic Pages | Logic pages.
Access User Category 1-5 | anything in a category that has the same privilege assigned to it. See "To create a custom privilege" below.
This Parameter privilege... | allows an operator to edit properties such as...
--- | ---
Edit Setpoint Parameters | occupied and unoccupied heating and cooling setpoints.
Edit Setpoint Tuning Parameters | demand level setpoint offsets, thermographic color band offsets, heating and cooling capacities and design temperatures, color hysteresis, and learning adaptive optimal start capacity adjustment values.
Edit Tuning and Logic Parameters | gains, limits, trip points, hysteresis, color bandwidths, design temperatures, and optimal start/stop.
Edit Manual Override Parameters | locks on input, output, and network points.
Edit Point Setup Parameters | point number, type, range, and network source and destination.
Edit Restricted Parameters | properties the installer restricted with this privilege.
Edit Category Assignments | Alarm, Graphic, Trend, and Report category assignments.
Edit History Value Reset | elapsed active time and history resets, and runtime hours.
Edit Trend Parameters | enable trend logging, log intervals, and log start/stop times.
Edit Calibration Parameters | point calibration offsets.
Edit Hardware Controller Parameters | driver properties.
Edit Critical Configuration | critical properties the installer protected with this privilege.
Edit Area Name | area display names.
Edit Control Program Name | control program display names.
Edit Alarm Configuration | enabling/disabling alarms and editing alarm messages, actions, categories, and templates.
InterOp Privilege 1 - 10 | those protected by password levels 1-10 in SuperVision.
This Functional privilege... | allows an operator to...
--- | ---
Manage Alarm Messages and Actions | add, edit, and delete alarm messages and actions.
Maintain System Parameters | edit all properties on the System Settings page.
Maintain Schedules | add, edit, delete, and download schedules.
Maintain Schedule Group Members | add, edit, and delete schedule groups.
Maintain Categories | add, edit, and delete categories.
Maintain Alarm Templates | edit Alarm Template and Reporting Action Templates.
Acknowledge Non-Critical Alarms | acknowledge all non-critical alarms.
Acknowledge Critical Alarms | acknowledge all critical alarms.
Force Normal Non-Critical Alarms | force non-critical alarms to return to normal.
Force Normal Critical Alarms | force critical alarms to return to normal.
Delete Non-Critical Alarms | delete non-critical alarms.
Delete Critical Alarms | delete critical alarms.
Execute Audit Log Report | run the Location Audit Log and System Audit Log reports.
Download Controllers | mark equipment for download and initiate a download.
System Shutdown | issue the Shutdown manual command that shuts down the WebCTRL® Server application.
Engineer System | log in and make database changes in SiteBuilder. use the copy, notify, reload, and revert manual commands. access the Configure and Set up Tree right-click menus in the WebCTRL® interface. Add text in the Notes field on an equipment's Properties page.
Access Commissioning Tools | access: Equipment Checkout Airflow Configuration Trend, Report, and Graphic categories that require this privilege Discovery tool
Maintain Graphs and Reports | add, edit, and delete trend graphs and reports. Also required for Time-lapse.
Maintain Connections | edit Connections page properties.
Remote File Management | access files using a WebDAV utility.
Remote Data Access-SOAP | retrieve WebCTRL® data through an Enterprise Data Exchange (SOAP) application.
Do not audit changes made using SOAP (Web services) | not have his SOAP (web services) changes recorded in the Audit Log.
Manual Commands/Console Operations | access the manual command dialog box and issue basic manual commands.
Manual Commands/File IO | execute manual commands that access the server's file system.
Manual Commands/Adv Network | execute manual commands that directly access network communications.
Manual Commands/Unrestricted | execute manual commands that bypass all safeguards and may cause unpredictable results if used incorrectly.
Change My Settings | edit his preferences on the My Settings page.
To create a custom privilege You can assign a privilege to a Graphic, Property, Trend, or Report category so that only operators with that privilege can access the category. You assign a category privilege on the page where you create or edit categories. If all the other privileges are too widely used to accomplish the results you want, you can assign one of the five Access User Category privileges to the operator(s) and category. For example, your system has 2 graphics categories, HVAC and Lighting/Security. You want HVAC technicians to see only the HVAC graphics and security personnel to see only the Lighting/Security graphics. To do this:
Assign... | To... | Results
--- | --- | ---
Access User Category 1 | HVAC graphics category and HVAC technicians only | The security personnel cannot see the HVAC graphics because they do not have Access User Category 1.
Access User Category 2 | Lighting/Security Graphics category and Security personnel only | The HVAC technicians cannot see the Lighting/Security graphics because they do not have Access User Category 2.
#### To add or edit a privilege set On the System Configuration tree, select Privilege Sets. Click Add to create a new privilege set, or select a privilege set to edit. Type the Name and Reference Name for the privilege set. Check each privilege that you want to include in the privilege set. Click Accept. CAUTION Include all required access privileges in a privilege set. For example, if you add Acknowledge Non-Critical Alarms to a privilege set, also add Access Alarms to that privilege set. TIP (Location-independent security only) To create a privilege set that is similar to an existing set, select the existing set, then click Add. The privileges that are initially selected are identical to those of the existing set.
#### To delete a privilege set On the System Configuration tree, select Privilege Sets. Select the privilege set to be deleted. Click Delete. Click OK. Click Accept.