The short answer
Elevated Tank Control
An elevated tank floats on the distribution system, so its level is the zone pressure and the zone pressure is its level. The controls run the supply pumps to hold the level in an operating band chosen for pressure, fire reserve, and turnover; an altitude valve or the pumps prevent overflow; the level is telemetered to the pumps that fill it, often miles away; and the level trend is the single best picture of what the zone is doing. Because the tank keeps the zone pressurized when everything else has failed, its level signal, its telemetry, and its overflow protection deserve redundancy.
Key points
- Level is pressure: one foot of water is 0.433 psi at every customer below it.
- The operating band balances pressure at the top, fire reserve at the bottom, and turnover between them.
- Overflow protection is independent of the fill control: an altitude valve, a high-level float, or both.
- The level telemetry runs the pumps. Its loss is handled by a defined fallback, never by a frozen value.
- A tank that never drops does not turn over, and stale water is a water quality violation waiting to happen.
Why the tank is in charge
A tank on a tower, open to the distribution system, holds the zone at a pressure equal to the height of water in it above each customer. Pumps fill it; demand drains it; the pressure everyone sees is set by the water surface, not by any pump. That is the reason the tank exists: it decouples pressure from pumping, supplies peak demand and fire flow from storage, and keeps the zone pressurized through a power outage for as long as the water lasts. Every control decision about the zone starts from the tank level.
The operating band
| Level | What it means | Set by |
|---|---|---|
| Overflow | Water leaves through the overflow pipe | The tank; the altitude valve or the high-level cutoff sits below it |
| High level, pumps stop | The top of the normal band | Near the top of the bowl, with margin below the overflow; the zone pressure at this level is the maximum customers see |
| Low level, pumps start | The bottom of the normal band | Deep enough that the daily cycle turns the water over; high enough that pressure and fire reserve are kept |
| Fire reserve | The volume below the operating band held for fire flow | The fire flow requirement times its duration; the operating band sits above it |
| Low-low | Pressure at the highest customer approaches the minimum | Alarm and emergency actions: additional sources, pressure zone valves |
The band is chosen on a drawing with the elevations of the tank and the highest and lowest customers, and it is checked against the pressure range the code and the utility allow. A tall tank with a deep band gives a wide pressure swing; a shallow band gives steady pressure and poor turnover. Utilities often run a deeper band in summer for turnover and a shallower one in winter for freeze protection, and the setpoints are seasonal parameters in the controller, not constants.
Filling
The pumps that fill an elevated tank are rarely at the tank. They are at a plant, a well, or a booster station, sometimes miles away, and they run on the tank level received over telemetry. The tank level control page covers the setpoints and the fallback when the level signal is lost; the elevated tank adds the pressure consequences. A pump station running at full output into a zone whose tank is nearly full raises pressure above the band until the tank absorbs it, and a station that stops abruptly lets the zone pressure drop to the tank level in seconds. Filling is therefore done at a controlled rate, with the station output limited to what the zone main can carry, and the stop is ramped where the pumps have drives.
Overflow protection
An elevated tank that overflows wastes water, damages the tower and the ground beneath it, and in cold weather builds ice on the structure. The fill control stops the pumps at the high level, and something independent of that control must stop the water if it fails.
- Altitude valve
- A hydraulic valve in the tank inlet that closes on the pressure of a full tank and opens as the tank drains. It works with no power and no telemetry. Its position is telemetered, because a closed altitude valve with pumps still running dead-heads the station and raises zone pressure.
- High-level float or switch
- A second level device on its own circuit that stops the pumps through the telemetry as a hardwired signal or a separate point, and alarms.
- Pump station overpressure cutoff
- A discharge pressure high limit at the pump station that stops the pumps when the zone pressure indicates a full tank and a closed valve. The last line.
- Overflow detection
- A switch in the overflow pipe or a flow indication that alarms an overflow in progress, so it is known within minutes rather than at the next drive-by.
Water quality and turnover
Water in a tank ages. Chlorine residual decays, temperature stratifies in summer, and a tank that sits near full with a small daily draw can hold water for days or weeks, long enough to lose its residual and grow nitrifying bacteria in a chloraminated system. The operating band is the first tool: a band deep enough that the daily cycle exchanges a meaningful fraction of the volume. Mixing systems, inlet nozzles that induce circulation, and scheduled deep drawdowns are the others. The controller can compute the turnover from the level trend and the tank geometry and alarm when the average age exceeds a limit, which is a better indicator than the residual sample taken once a week at the base.
Cold weather
An elevated tank in a cold climate ices from the surface and the riser. Turnover keeps the water moving; a shallower winter band keeps the surface high and the ice layer thin; heaters in the riser and the valve pit keep the pipes from freezing. The level transmitter, whether a pressure transducer at the base of the riser or a radar in the bowl, needs its own protection: a pressure transmitter in a heated pit, a radar with a sunshade and a heated antenna where ice forms on the surface. A frozen level signal in February is the classic elevated tank failure.
The level signal
The tank level is usually measured as pressure at the base of the riser, which reads the height of water above it directly, and it is often the only measurement at the tank. The signal is transmitted to the pump station and SCADA by radio, cellular, or leased line, and everything about the zone depends on it.
- Two measurements where the tank is critical: a pressure transmitter at the base and a radar or a second transmitter, compared in the controller.
- A timestamp and a validity flag on the received level at the pump station, with the fallback on stale or bad data defined in the narrative: a fixed schedule, local discharge pressure control, or hold and alarm.
- A local indication at the tank site for the technician and for a manual comparison against a sight gauge or a tape at the hatch.
- The level trend on SCADA at the highest resolution the telemetry allows, with the pump run status from the filling station overlaid.
Frequently asked questions
- How full should the tank be kept?
- In the operating band, which is chosen for pressure, fire reserve, and turnover, not as full as possible. A tank held near the top has the best pressure and the worst water age. Most utilities cycle through a band of several feet daily and set the band seasonally.
- Why does the zone pressure swing through the day?
- Because the tank level swings through the operating band, and pressure is level. A deep band gives a wide swing. If the swing is objectionable, the band is shallower, at the cost of turnover, or the zone gets a pressure-regulating arrangement for the affected customers.
- What happens to the zone when the telemetry fails?
- Whatever the fallback in the control narrative says. The pump station cannot see the tank, and it runs a defined program: a time-based schedule sized to average demand, control on its own discharge pressure with limits that approximate the tank band, or hold the last state for a limited time and alarm. The altitude valve and the high-level float protect the tank from overflow while the fallback runs.
- Can the tank level be used to detect a main break?
- Yes, and it is one of the better uses of the trend. A level that falls faster than the demand history at that hour, while the pumps run as usual, is water leaving the zone somewhere. A rate-of-fall alarm on the tank level, compared with a demand profile, catches large breaks before the phones ring.
Related topics
- Tank Level ControlHow a storage tank is filled and drawn on level setpoints, how the setpoints are chosen to keep the water turning over, and what the station does when the tank stops talking.
- Distribution Pressure ControlHow a booster or high service pump station holds discharge pressure with variable speed pumps, how pumps are staged, and what stops the system hunting.
- Hydrostatic Level MeasurementMeasuring level from the pressure of the liquid above a sensor: submersible transducers, bubblers, and base-mounted transmitters, the density assumption behind all of them, venting, installation, and what makes them drift.
- Radar Level MeasurementNon-contact and guided wave radar, why it handles a wet well better than most alternatives, and the installation details that decide whether it works.
- Booster Pump StationsInline stations that raise pressure from one zone to another: suction pressure protection, discharge pressure control with drives, staging, the hydropneumatic tank alternative, surge and check valve behavior, and the interlocks that keep a booster from collapsing the zone it draws from.
- Signal ValidationCatching a failed analog input in logic before it runs a pump on a dead transmitter: range checks, module status bits, frozen-value detection, rate checks, and what the program does with a bad value.
Direct contact
Have a controls question?
Reach Eric Sullivan directly about anything on this site, a controls or automation topic, or one of his personal projects.