Siemens SIMATIC S7-1500/ET 200MP System Manual page 227

Protection
10.3 Configuring access protection for the CPU
Properties of the access levels
Each access level allows unrestricted access to certain functions without entering a password,
e.g. identification using the "Accessible devices" function.
The default of the CPUs is "No access (complete protection)". In the default access level, the
user may neither read nor change the hardware configuration and the blocks. To obtain
access to the CPUs, use an alternative parameter assignment in the properties of the CPU:
• A password for the protection level "No access (complete protection)"
• A different protection level, e.g. "Full access (no protection)"
Communication between the CPUs (via the communication functions in the blocks) is not
restricted by the access level of the CPU, unless PUT/GET communication is deactivated in the
"No access" (complete protection) access level.
Entry of the right password allows access to all the functions that are allowed in the
corresponding level.
Note
Configuring an access level does not replace know-how protection
Configuring access levels offers a high degree of protection against unauthorized changes on
the CPU via network access. Access levels are used to restrict the rights to download the
hardware and software configuration to the CPU. However, blocks on the SIMATIC Memory
Card are not write-protected or read-protected. Use know-how protection to protect the code
of blocks on the SIMATIC Memory Card.
Behavior of functions with different access levels
The STEP 7 online help contains a tabular list of the online functions that are possible in the
various access levels.
226
Automation system
System Manual, 01/2023, A5E03461182-AK