Managing CAE models

A model is a representation of a program or device in the control system and its objects, such as a tool, utility, or an application function block. You can create models in CAE to assign them to roles.

A model includes security capabilities to create:

  • Permissions for components in a model.

  • Objects for the permissions.

  • Actions for each permission.

  • Parameters for Device Specific Settings (DSS) (optional).

Recommendations:

  • Assign roles only the essential privileges needed to perform their job.

  • Follow user account management tasks as described by your organization or contact your network administrator.

Showing MODELS tab

The MODELS tab is hidden by default and can be enabled using a security administrator (SecurityAdmin) user account.

  1. Open Cybersecurity Admin Expert.
  2. Select ROLES tab > SECADM role.
  3. Expand CAE item in the Permissions area.
  4. Enable Model Management and Model View:
  5. Click Save changes. The MODELS tab is added.
Adding, editing, or deleting a model

Default models are predefined and cannot be edited.

  1. Open Cybersecurity Admin Expert.
  2. Select MODELS tab:

    • Add model: click Add model button, edit details.

    • Edit model: select a model and edit details.

    • Delete model: select a model and click the Trash icon. SAM model can not be deleted.

  3. Click Save changes.
Adding or editing model Permissions, Objects, Actions, or Parameters
  1. Open Cybersecurity Admin Expert.
  2. Select MODELS tab > select a model:

    • Add or edit Permissions: click Add permission or select a permission and click Edit permission.

    • Add or edit Object: select a permission and click Add object or select an object and click Edit object.

    • Add or edit Action: select an object and click Add action or select an action and click Edit action.

    • Add Parameter for DSS: scroll down and click Add Parameter. You can set specific security parameters by model, such as disabling a USB port or WI-FI access.