Privilege Levels And Passwords - GE VersaMax PLC User Manual

7.7 Privilege Levels and Passwords

Level
4
Least Protected
3
2
1
Most Protected
CPU Operation
For public disclosure
Passwords are an optional configurable feature of the VersaMax PLC. Passwords provide
different levels of access privilege to the PLC when the programmer is in Online or
Monitor mode. Passwords are not used if the programmer is in Offline mode. Passwords
can restrict:
• Changing I/O and PLC configuration data
• Changing programs
• Reading PLC data
• Reading programs
There is one password for each privilege level in the PLC. Each password may be unique
or the same password can be used for more than one level. Passwords are one to seven
ASCII characters in length.
By default, there is no password protection. Passwords are set up, changed, or removed
using the programming software. After passwords have been set up, access to the PLC is
restricted unless the proper password is entered. Entering a correct password allows
access to the requested level and to all lower levels. For example, the password for level 3
allows access to levels 0, 1, 2, and 3. If PLC communications are suspended, protection
automatically returns to the highest unprotected level. For example: If a password is set at
levels 2 & 3, but none at level 4, if the software disconnects and reconnects, the access
level is 4. Privilege level 1 is always available because no password can be set for this
level.
Access Description
▪ Write to all configuration or logic. Configuration may only be written in Stop mode;
logic may be written in Stop or Run mode (if run-mode store is supported).
▪ Set or delete passwords for any level.
▪ Plus all access from levels 3,2 and 1.
▪ NOTE: This is the default if no passwords are defined.
▪ Write to all configuration and logic when the CPU is in Stop mode, including
word-for-word changes (when supported), the addition/deletion of program logic, and
the overriding of discrete I/O.
▪ Read/Write/Verify user flash.
▪ Store reference/override tables.
▪ Change sweep mode.
▪ Plus all access from levels 2 and 1.
▪ Write to any data memory, but this does not include storing tables.
▪ This includes the toggle/force of reference values but does not include overriding
discrete I/O.
▪ The PLC can be started or stopped.
▪ PLC and I/O fault tables can be cleared.
▪ Plus all access from level 1.
Read any PLC data except for passwords. This includes reading fault tables, current
status, performing datagrams, verifying logic/config, and loading program and
configuration from the PLC. No PLC memory may be changed.
GFK-1503E User Manual 101