Securing User Access to GENESIS Client Applications

After creating equipment assets and other project requirements, the security administrator establishes the account policy password requirements, adds users and creates groups in the Security section in Workbench. When setting up security, the first user that you create must have administrator privileges. This is done to ensure that you can access and manage the system.

The following table lists the security tasks that you typically perform. We recommend that you perform these tasks in the order in which they are listed.

Security Tasks	Description
Perform the Initial Security System Setup	The security server's initial setup requires you to establish general security settings and create the first user account as the administrator (see Adding Users). In the initial security setup, the first user profile you create must be the administrator. The administrator has access to and authority over all client applications, defines the security database or domain, adds users and groups, and sets password requirements. Consider creating a second administrator user account. This backup administrator account can be valuable if the primary administrator is unavailable.
Complete General Settings	The General Settings section, a part of Global Settings, manages how account user names in the security system database map to the Windows domain. For further information, see Defining General Settings.
Set up Account Policies	An account policy specifies the standard password login and logout for the account, including password complexity, and defines how to handle failed login attempts, sets log-in limits, and restricts daily working hours. For further information, see Defining Account Policies.
Create Groups	In the security system, a group allows users to share a set of privileges. Users are given membership to a group and inherit the permissions and restrictions of the group, which streamlines the management of user privileges. For further information, see Creating Groups.
Add Users	Adding a user is more than just creating a user account. It's about assigning a name, password, and specific privileges to a key player in the system, making them an integral part of the operation. For further information, see Adding Users.