Siemens PCS 7 Installation Manual page 85

If you want to authorize other users to use a PCS 7 component, they must be set up in Windows
and assigned to the relevant PCS 7 components (user groups).
You can find additional information on this in the section "How to set permissions for the project
paths (Page 86)".
Basic procedure
● Run the following functions centrally in Windows for all options for setting up users and
user groups:
– Definition of users and user groups that are available on the Windows Server in question.
– Definition of passwords.
● The following applies to defining user roles with the SIMATIC Logon:
You can assign users and user groups particular roles within some PCS 7 applications (for
example, SIMATIC BATCH).
Example: SIMATIC BATCH
– User permissions in a user role (global)
– Permitted user roles per computer (for each specific computer)
– Permitted user roles per unit (for each specific unit)
● The PCS 7 applications are supplied with information about the logged on user via the
central logon service and can be informed of any change of the logon, etc.
Basic procedure in a Windows domain
When operating in a domain, an additional global user group can be set up for the domain and
made a member of the "SIMATIC HMI" user group.
● A domain administrator is responsible for creating users and groups in a domain. This
administrator must have the necessary experience and authorization to administer the
network.
● Domains administrators have special permissions in PCS 7 systems for managing the
network, for example, for user management or for entering computer stations in a domain.
We recommend you refrain from using these permissions when working in the PCS 7
project.
Requirements
● The domain administrator has created a global user group for the domain.
● The domain administrator has entered users within the domain into the global user group
for the domain. These users can access WinCC when logged on.
Procedure
1. Use the search box in the start menu to open the "Local Users and Groups".
2. Select the entry "Groups". All groups are displayed in the data window.
3. Select the "SIMATIC HMI" group.
4. Open the "Add member" dialog using the shortcut menu and enter the global user group
for the domain as a member of the "SIMATIC HMI" user group.
PCS 7 - PC Configuration (V8.2)
Installation Manual, 03/2016, A5E36200050-AB
Installing PC stations
5.4 Installing the PCS 7 software
85