Glossary · HMI, SCADA and operations
User role
Also known as: Role, Role-based access control (RBAC) role
German: Benutzerrolle
In automation and IT systems, a user role is a named set of permissions that is assigned to users according to their job function, such as operator, maintenance technician or engineer, so access rights are managed per role rather than per person.
- HMI and SCADA
- OT security
In one sentence
A user role is a named set of permissions assigned by job function, such as operator or engineer, to manage access rights consistently.
Example
The HMI defines the roles Operator, Shift lead, Maintenance and Engineering; a new technician is simply assigned the Maintenance role.
How it applies
- Engineering: Role-based access control is described in IEC 62443-3-3 as a way to enforce least privilege. Define roles from actual tasks, and map each role to screens, commands and parameter changes. Central user management simplifies onboarding and removal.
- Operation: Review role assignments regularly and remove access for people who have left or changed jobs.
- Documentation: Keep a role-permission matrix in the system documentation and state in the operating manual which role each task requires. Role names on the HMI, in the manual and in the organization's Responsibility assignment should match.
User role vs. access level
A user role groups permissions by job. An Access level ranks permissions hierarchically. Many HMIs combine both: roles for flexibility, levels for simple escalation.