Glossary
Glossary · Operations and security
Role Based Access Control (RBAC)
Role based access control (RBAC) grants each user of a control system the permissions of a role, such as viewer, operator, or administrator, rather than individual rights.
In an energy management system the roles separate seeing the plant from commanding it and from changing its configuration. A viewer reads dashboards. An operator can switch modes and adjust panels. An administrator can add devices, users, and algorithms. Multi factor authentication on the privileged roles and an audit log of every privileged action are the controls reviewers expect alongside RBAC.
Published
Source
NIST Special Publication 800-82, Guide to Operational Technology Security, National Institute of Standards and Technology