Role-Based Access Management on iNut PC — Secure Role-Based SCADA
A guide to role-based access management on iNut PC — a lightweight SCADA system built on FUXA HMI. Assign Admin · Operator · Viewer roles, control actions per device via the mqtt_clientid identifier, and share access safely while keeping operations secure.
iNut PC operates as a lightweight SCADA system built on the FUXA HMI platform, with configuration pre-prepared by the provider. When multiple people operate the same monitoring and control system, role-based access ensures each person touches only their own part of the job: viewers only see data, operators can switch devices on/off, and only administrators can change the configuration. This prevents mistaken actions and protects the safety of the entire production line.
⚠️ Important note: Each device is tied to a pre-provisioned mqtt_clientid identifier. Do not change configuration parameters without guidance from the iNut technical team, to avoid losing the device's connection.
Role-based permission matrix
Three core action groups — View, Control, Configure — are assigned to each role transparently:
Login & device identity
Users log in at https://vnmap.inut.vn/ with their individually issued account. Each device is identified via mqtt_clientid — a bound MQTT identifier that ensures control rights always match the right device and the right person.
Benefits of proper role-based access control
- 🛡️ Operational safety — reduces accidental actions; only authorized users can control devices.
- 👀 Clear accountability — always know who views, who controls, and who configures.
- 🤝 Flexible sharing — grant access to colleagues or family members while still keeping control over scope.
- 🪪 Device-bound permissions — control rights are tied to the mqtt_clientid, so there's no risk of mixing up systems.