IEC 62351 - Power Systems Communication Security

Part 8: role-based access control – IEC 62351 - Power Systems Communication Security

IEC 62351 - Power Systems Communication Security 8:7: Part 8, clause 7: simplified role assignment (generic roles across multiple role definitions)

Where several role definitions exist (for different data models or referencing standards), generic roles let one assignment apply across them, illustrated with the pre-defined SECADM role applied to selected definitions.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 8: role-based access control – IEC 62351 - Power Systems Communication Security

8:10 Part 8, clause 10: RBAC access token distribution models
8:5 Part 8, clause 5: the RBAC process model and concepts (subjects, roles, permissions, separation, criteria for defining roles)
8:6 Part 8, clause 6: pre-defined roles, role-to-permission assignment, custom roles, operational states and security events
8:8 Part 8, clause 8: definition of access tokens (mandatory and optional components, profiles A X.509 public-key certificate, B X.509 attribute certificate, C JSON Web Token, D RADIUS, E LDAP)
8:9 Part 8, clause 9: verification of access tokens (multiple tokens, subject authentication, availability, validity period, integrity, issuer, role ID, revision, area of responsibility, role definition, revocation state, operation, sequence number, revocation methods)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls