Device Functions and Safety Classes Explained

Every device is made of functions: the things you can read or do with it, such as reading a lock's state, locking, unlocking, setting a level or reading a temperature. Access in IoT Devices is given per function, not per device, because a person who may watch a door is not always someone who should open it.

Safety classes

Each function belongs to a safety class that says how careful the platform must be with it.

• Read: look only, such as reading a temperature or a lock's state.
• Comfort: comfort controls, such as lights and temperature.
• Equipment: equipment that can cost money or cause wear if misused.
• Security: locks, alarms and other security controls.
• Safety-critical: controls that can cause harm if they are used by mistake.

The vendor's connector gives each function its class. Your organization can raise a function's class on a device, never lower it below the vendor's class.

What each class asks for

• Read, comfort and equipment functions run with the access you were given.
• Security functions show a confirmation that names the device and its place before they run.
• Safety-critical functions are off on every device until someone turns them on for that device. Each use asks you to type a confirmation word. When the control is turned on, it can also be set to need a second person to confirm each use.
• Security and safety-critical functions also ask for your password, as often as Password confirmation for security actions says. See IoT Settings: Retention, Re-check and Defaults. Every command is recorded.
• Safety-critical functions are never available to SI members, through a shared link or by voice.

Presets follow the class

When you give access, a preset such as Up to comfort includes every function up to that class. The highest preset is Up to security. Live views and safety-critical controls are never part of a preset: you pick them one by one, and safety-critical controls only on a single device. Giving safety-critical access also needs the Manage IoT Settings right. Access that includes security controls or live views asks you to say why it is needed.

Verified functions

A function with no successful read or command in the last 14 days is marked Not verified. One that worked recently is Verified, and one that failed is Failing. SI members can use only verified functions.

Where you see it

• On a device page, the Safety section lists each control with Vendor says and In use as. People with the Manage IoT Settings right can choose Raise to to raise a class, giving a reason, or Restore the vendor's class to undo a raise; people with the Manage IoT Access right turn safety-critical controls on and off there with Turn on… and Turn off.
• When you give access, each function in the What step shows its class.
• The Safety and notifications tab in Settings → Devices (IoT) sets how often the password is asked.