OPC UA Well-Known Roles
From OPC Labs Knowledge Base
The table below is a re-write of "Well-Known Roles" table from OPC 10000-3 (OPC Unified Architecture Part 3: Address Space Model), Release 1.05.06. We have created columns for the distinct separate permissions, and filled in the grid according to the prose in the original table.
| BrowseName | Browse and read non-security related Nodes | Browse and read all type Nodes | Browse | Read live data | Read historical data/events | Subscribe to data/events | Write live data | Call Methods | Read/write configuration data | Change the non-security related configuration settings | Change security related settings |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Anonymous | only in the Server Object |
yes | |||||||||
| AuthenticatedUser | yes | ||||||||||
| TrustedApplication | yes | ||||||||||
| Observer | yes | yes | yes | yes | |||||||
| Operator | yes | yes | yes | yes | some[1] | some[1] | |||||
| Engineer | yes | yes | yes | yes | yes | ||||||
| Supervisor | yes | yes | yes | yes | yes | ||||||
| ConfigureAdmin | yes | ||||||||||
| SecurityAdmin | yes |