User Management Check

What is the difference between what Ignition does and what Kanoa does for security?

Ignition authenticates the user (confirms who they are, via internal user sources, Active Directory, or Identity Providers). Kanoa authorizes the user — it determines what they can do inside Kanoa based on user, role, and asset. See Managing Users.

tempOperator has the Operator role on the Finishing area only. What happens when tempOperator tries to start a run on Machine 1?

The run controls are not available. Role assignments are scoped to assets, so tempOperator has Operate Assets rights for Manual Pack 1 (under Finishing) but not for Machine 1, which is under Machining. Assets outside a user's permissions can still be viewed, but not changed. See Managing Users and Security Functions.

Who receives Gateway Admin rights, and who can grant them?

The first user to log into a freshly installed Kanoa MES application automatically receives Gateway Admin rights. Only Gateway Admins can grant Gateway Admin rights to other users. See Managing Users.

If users come from Active Directory or an Identity Provider, what does Kanoa manage?

Authentication and user management are generally handled externally; Kanoa manages the user's asset-role associations. With an internal Ignition user source, you can create, edit, and delete users from the Kanoa security table. See Managing Users.

Your team builds a custom Perspective screen. What security consideration applies?

Kanoa-provided screens already include security checks, but custom screens may need their own. Screen designers must intentionally apply the same security rules when building custom views. See Managing Users.

Where is the navigation editor, and how do you hide the Configuration menu from operators?

Configuration → Application → Navigation. Select the Configuration item and set its Roles so it is visible only to appropriate roles (Administrator, Scheduler, Supervisor — not Operator). See Navigation Editor.

You've hidden the Configuration menu from operators. Is that what stops an operator from changing asset configuration?

No. Navigation roles only control which menu items a user sees. What a user can do on a screen is controlled by the functions of their roles on each asset, such as Configure Assets, which each Kanoa view checks. See Security Functions.