Object-based security applies to individual instances of entities. For example, on the system, object-based security is applied to the Asset Entity with each asset as an object.

On Data Management Module, object-based security only applies after the role-based security has taken effect. For example, if user does not have role-based Write privilege to the Asset Entity, they will not be able to edit any Assets Entity object, even object-based Write privilege has been granted to the Asset Entity object.

Data Management Module administrator can configure the object-based security setting for user who have access privilege to Asset entity but restrict or limit the user only can access to certain asset element(object) on the plant hierarchy tree list view working space.

Parameter		Definition
Resource		The Asset entity element(object) path on plant hierarchy tree list view working space for configure the access privilege.
Identity		User identity who applies to the object-based security configuration
Privilege		Access privilege for selected resource and selected identity. Delete Asset Media – Privilege to delete asset media file entity Read Asset Media – Privilege to read asset media file entity Write Asset Media – Privilege to create/edit asset media file entity Delete Asset Table – Privilege to access asset entity element table Read Asset Table – Privilege to access asset entity element table Write Asset Table – Privilege to create/edit asset table entity Delete Asset – Privilege to delete asset entity and its contain Read Asset – Privilege to read asset entity and its contain Write Asset – Privilege to create/edit asset entity and its contain Delete Asset Attribute – Privilege to delete asset attribute Read Asset Attribute – Privilege to read asset attribute Write Asset Attribute – Privilege to create/edit asset attribute
Child Privilege		It used to configure the object-based security setting shall apply to asset entity child element or not. Update child privileges for modified identities – Access privilege for selected identity will apply to selected resource child element Do not modify child privileges – Access privilege for selected identity will not apply to selected resource child element