A role can now be limited to some of a plant's networks

Every network of a plant can now be tagged by what it carries — "Plant control", "Network infrastructure", "Cameras" or "Security systems" — when it is added, edited or opened for remote access. The new "Security Officer" role reaches only the networking, camera and security networks, never production, revenue or plant control.

• An untagged network stays out of reach for a restricted role, and its row says so.
• A network's address, label and tags can now be edited in place instead of deleting and re-adding the row.
• A partner given remote access now reaches only the networks their role allows.
• A plant's access log now shows only devices in the networks the reader's role may reach.
• An organization's activity list now records what a partner granted or withdrew for the organization.

Release notes