210 Rockwell Automation Publication 1426-UM001J-EN-P - August 2019
Chapter 8 Other Functions
Once security is enabled and an Admin class account is created during initial
configuration, the remaining security configuration can be done through the
network web page.
If you want to configure power monitors by using software, such as FactoryTalk®
EnergyMetrix™ RT software, set up at least one Application class account.
This table summarizes the security classes, privileges, access, and limits that apply
to the PowerMonitor 5000 unit.
The following rules further define security operation:
• The USB Admin account can be accessed only through the web page when
connected via USB.
• Only one Admin can be active at a time, including the USB Admin class.
• A logged in account remains active until logged out or until 30 minutes has
elapsed without writing a configuration parameter. FTP access to log files
remains until the account is logged out.
• Only an Admin class account can add, remove, or edit accounts. An
Admin class account cannot delete itself and the default USB Admin
account cannot be deleted.
• An Application class account is used for access by using CIP or PCCC
protocols via native Ethernet network or optional DeviceNet network
communication. An Application class account logs in by writing its
username to the Security.Username
table on page 334 and then its
password to the Security.Password
table, on page 335, within 30 seconds.
An application can obtain security status information by reading the
Status.TableWrites
data table on page 346.
Table 27 - Account Classes and Privileges
Account Class Privileges Interface Maximum Number of Accounts
USB admin Manage security accounts
Read data
Write configuration parameters
Download log files
USB only web page 1
Admin Manage security accounts
Read data
Write configuration parameters
Download log files
USB and native Ethernet web page 10
User Read data
Download log files
USB and native Ethernet web page 20
Application Read data
Write configuration parameters
Download log files
Native EtherNet/IP™ and optional
DeviceNet® communication CIP™ assembly
and parameters objects CSP/PCCC data
tables
10
Privileges with security disabled (all) Read data
Write configuration parameters
Download log files
Any -
Security that is enabled but no user logged
in
Read data Any -