Standards Development

Scope

IEC 62351-8 Ed.2 defines the general approach for RBAC as well as mechanisms how to realize RBAC in power systems. It specifically defines standard roles (and a way to define custom roles) and how the mapping of permissions to roles as well as the mapping of permissions to objects can be performed.

IEC 62351-8 Ed.2 shifts the actual role definition in terms of definition and mapping of permissions for standard based roles and for custom based roles to referencing documents and concentrates on the conceptual approach and the technical realization to support role-based access control by defining access tokens and their handling using different technology stacks.

This proposed document will support activities and objects not addressed in existing role definition documents for specific data models like IEC 61850-90-19 for mapping RBAC to IEC 61850 or IEC 60870-5-7 Ed.2 mapping RBAC to the 101/104 protocols. Moreover, the RBAC mapping to engineering is intended to support general maintenance and lifecycle management of systems and components.

Purpose

This part of IEC 62351 addresses the role definition including the permissions to support (web-based) engineering and parametrization. With this, it provides a definition of permissions as rights on engineering specific objects, as well as the assignment of these permissions to dedicated roles, as outlined in IEC 62351-8 ED2