A method for managing access control within a modular automation system including at least two automation modules. Each automation module is associated with an operation or a set of operations for carrying out a specific task. The method includes: receiving a schema of a common process including at least the order of processing steps of the modular automation system, wherein each processing step includes one or more of the specific tasks of the automation modules; generating privilege associations for each processing step with one or more automation modules, based on the schema; and generating an access control policy for the automation modules based on the privilege associations.

A method for managing access control within a modular automation system including at least two automation modules. Each automation module is associated with an operation or a set of operations for carrying out a specific task. The method includes: receiving a schema of a common process including at least the order of processing steps of the modular automation system, wherein each processing step includes one or more of the specific tasks of the automation modules; generating privilege associations for each processing step with one or more automation modules, based on the schema; and generating an access control policy for the automation modules based on the privilege associations.

An approach for control of users relative to access to controllers of a site in a hierarchy of controllers and building equipment. When a user of a customer has established a read write connection to a site controller, the customer does not necessarily want any subsequent user to establish a read write connection to the site controller or another controller within the same site and also make changes, for example, to settings of building equipment. Thus, a subsequent user may be allowed a read only connection and just be able to view building equipment information. When the first user has disconnected either intentionally or by inactivity, the site controller may be cleared allowing a subsequent user to obtain a read write connection. If the first user is inactive but fails to disconnect from the controller, an auto log-off provision may disconnect the user after a specified period of inactivity.

An approach for control of users relative to access to controllers of a site in a hierarchy of controllers and building equipment. When a user of a customer has established a read write connection to a site controller, the customer does not necessarily want any subsequent user to establish a read write connection to the site controller or another controller within the same site and also make changes, for example, to settings of building equipment. Thus, a subsequent user may be allowed a read only connection and just be able to view building equipment information. When the first user has disconnected either intentionally or by inactivity, the site controller may be cleared allowing a subsequent user to obtain a read write connection. If the first user is inactive but fails to disconnect from the controller, an auto log-off provision may disconnect the user after a specified period of inactivity.

Example methods and apparatus are provided for configuring a process control device. An example method includes implementing a first configuration at the process control device based on a first configuration request. The example method includes setting a configuration flag. The configuration flag indicates the first configuration is being implemented. The example method includes denying a second configuration request while the configuration flag is set.