Authorization - Arc protection - Motor protection - Feeder protection - Back-up protection - Technical Manual - REX610 Protection and control - Relion Protection and Control - 1.2 - IEC - ANSI

Four factory default user accounts have been predefined, each with different rights and default passwords. The roles for these four user accounts are the same as the username.

VIEWER
OPERATOR
ENGINEER
ADMINISTRATOR

The default passwords in the protection relay delivered from the factory can be changed with Administrator user rights or by the users themselves.

Each protection relay supports four roles and eight user accounts. Each user can be mapped to only one role.

IED Users in PCM600 is used to manage the local user accounts.

User accounts can be created under any role.
Administrator needs to share the default password generated for the user account by the tool with the users and recommend the user to change the password.
The user accounts’ password can be changed by the users from IED Users or from the LHMI.
Administrator can reset the user passwords.

The user account information is written to the protection relay from IED Users in PCM600. The user account information is securely maintained in a local database in the protection relay.

Any user logging into the protection relay from LHMI or PCM600 (FTPS/USB) is authenticated based on the user account information and this user’s rights are defined by the user’s role.

Table 1. Default user roles
Role	Description
VIEWER	Viewing what objects are present in the logical device
OPERATOR	Viewing what objects are present in the logical device Performing control operations such as opening or closing the circuit breaker
ENGINEER	Viewing what objects are present in the logical device Making parameter setting and configuration changes in addition to having full access to the data sets and files
ADMINISTRATOR	Superset of all the roles

Table 2 describes the default mapping of all the user rights associated with all the roles in the protection relay. This mapping can be modified according to the user requirements.

Table 2. Default roles-to-rights mapping
Rights/Roles	ADMINISTRATOR	ENGINEER	OPERATOR	VIEWER
Settings & Configuration	Read/Write	Read/Write	Read	Read
Settings Group Handling	Read/Write	Read	Read/Write	Read
Control Operations	Read/Write	Read	Read/Write	Read
Record Handling	Read/Write	Read/Write	Read	Read
Test Mode	Read/Write	Read/Write	Read	Read
System Update	Read/Write	Read	Read	Read
User Management	Read/Write	Read	Read	Read

User account information can be exported from IED Users in PCM600 to an encrypted file which can be imported into another protection relay.

Note: User authorization is disabled by default for LHMI.

Note: For user authorization for PCM600, see PCM600 documentation.

Note: The Administrator user shall not be allowed to delete the last ADMINISTRATOR user and itself. FTP/FTPS logins are done by entering the username and password; there is no role selection required. The highest role for the username is automatically selected by the protection relay. Performing the Restore Factory settings operation in IED Users in PCM600 restores user accounts to the factory user accounts.

Authorization - Arc protection - Motor protection - Feeder protection - Back-up protection - Technical Manual - REX610 Protection and control - Relion Protection and Control - 1.2 - IEC - ANSI - 03.05.2023

REX610 Technical Manual