Siemens SIMATIC S7-1500 Function Manual page 197

OPC UA communication
9.3 Using the S7-1500 as an OPC UA server
3. You will find the following function rights in the "Function rights" section:
– OPC UA server access
– User authentication of the OPC UA client
4. The role "PLC-opcua-role-all-inclusive" still needs to be assigned to the relevant users
("Users" tab under "Security settings" in the project tree).
See also
User authentication (Page 193)
User authentication (Page 275)
196
This function right apples on the OPC UA server of the S7-1500 CPU. Only when this
option is selected does a user of the CPU PLC_2 server who has been assigned the
role "PLC-opcua-role-all-inclusive" have the following right: For the establishment of a
session with the server, the user requires client authentication with one of the user
names and corresponding passwords that have been centrally defined (and loaded to
the CPU).
This function right apples on the OPC UA client of the S7-1500 CPU (with client
instructions). Only when this option is selected can the user of the client of CPU
PLC_2 who has been assigned the role "PLC-opcua-role-all-inclusive" use the user
name and password for authentication to establish a session with a server.
Figure 9-24 Setting function rights
Function Manual, 11/2019, A5E03735815-AH
Communication