Limit what you see and what you can use via OPC UA

Hi everyone, 

I do have customers using the Application Server OPC UA Server functionality and they would like to know if it's possible to:

1. Restrict what you can see, meaning what is offered in general dependent on the user asking
2. Configure where you can read or where you can write to certain attributes

This is possible via TOP Server but it would be nice to have that functionality in our product as well:

Additionally it's possible via TOP Server to specify which network card is providing data via OPC UA. On AVEVA side that's currently not possible.

So are there any thoughts regarding these requests, is there anything planned or does it need enhancement requests?

Thanks
Peter

  • Hi Peter,

    Thank you for the feedback!

    The OPC UA Server for Application Server does not allow specificaiton of what data that is published or visible per user. We have some ideas for this but we haven't committed those ideas to our product backlog quite yet.

    Connections that are authenticated (i.e. not anonymous) will be granted write permissions according to the role-based authorization model of the application/galaxy. So if the connection is authenticated as "Bob", it will have Bob's write permissions as defined by Bob's role memberships.