From The Access Level To The Function Right Of Users - Siemens SIMATIC S7-1500 System Manual

Protection
11.3 Local user management
Loading the device as a new station - with user data
If you load an already configured CPU into a new project, for example, because you do not
have the original project, the user data is loaded into the project and is available for further
processing of the CPU settings.
Changing of passwords during operation
You can use the CPU web server API to write an application with which each user can change
their password at runtime, provided that the original password has been entered correctly
and the new password corresponds to the set password guideline.
Requirement: You have enabled access control for the CPU.
A user can change their own password at any time, even if the password has expired. If the
password has expired, the user must change the password. If the password has expired, it is
not possible to log in.
API methods used:
• Api.ChangePassword
• Api.GetPasswordPolicy
You can find more information about the API methods in the Web Server Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59193560).
Note
Passwords changed at runtime take priority over loaded passwords
If you have changed your password during running operation and subsequently load your
project, the password assigned during runtime takes precedence over the password set in the
project (default setting).
If you want to overwrite the passwords changed during runtime by loading the project, you
have to select the option "Load all user management data (reset to project data)". In this case,
all passwords changed at runtime are lost!
11.3.3

From the access level to the function right of users

The following section shows how to implement access protection with the new local user
management for SIMATIC Drive Controllers.
242
SIMATIC Drive Controller
System Manual, 11/2023, A5E46600094-AD