IEC 62351 - Power Systems Communication Security

Part 8: role-based access control – IEC 62351 - Power Systems Communication Security

IEC 62351 - Power Systems Communication Security 8:10: Part 8, clause 10: RBAC access token distribution models

Access tokens reach the target system by push (the subject presents the token, for instance in a TLS certificate or JWT) or by pull (the target queries a RADIUS or LDAP server), with the models the part describes for local and remote access.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 8: role-based access control – IEC 62351 - Power Systems Communication Security

8:5 Part 8, clause 5: the RBAC process model and concepts (subjects, roles, permissions, separation, criteria for defining roles)
8:6 Part 8, clause 6: pre-defined roles, role-to-permission assignment, custom roles, operational states and security events
8:7 Part 8, clause 7: simplified role assignment (generic roles across multiple role definitions)
8:8 Part 8, clause 8: definition of access tokens (mandatory and optional components, profiles A X.509 public-key certificate, B X.509 attribute certificate, C JSON Web Token, D RADIUS, E LDAP)
8:9 Part 8, clause 9: verification of access tokens (multiple tokens, subject authentication, availability, validity period, integrity, issuer, role ID, revision, area of responsibility, role definition, revocation state, operation, sequence number, revocation methods)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls