User Administration - Siemens SIMATIC PCS 7 Configuration Manual

4.2.6

User administration

User concept
Using the following roles for a PCS 7 plant is recommended when planning the user concept:
● PCS 7 installation
A user account which is a member of the local administrator group is required to start the
PCS 7 set-up.
● Windows users for operator stations and engineering stations
Working permanently with administrator rights on the PCS 7 system is not recommended
once the installation is complete for security reasons. This means that at least one additional
Windows user is required on each station. In addition to the user groups required by PCS
7 components (e.g. SIMATIC HMI), membership in the "user" group will suffice.
Note
For some PCS 7 components (e.g. SIMATIC Management Console, Process Historian
[PH]), belonging to the group of administrators and logging in with administrator rights to
the station and to the component is required.
You will find further information on the SIMATIC Management Console in the manual
"SIMATIC Process Control System PCS 7 SIMATIC Management Console"
support.industry.siemens.com/cs/ww/en/view/90683240).
You can find additional information on the Process Historian in the manual "Process
Historian: Administration"
109475338).
● Logging onto OS Runtime (using the SIMATIC logon)
For each operator you can create a Windows user who logs on with the allocated user rights
with activated OS runtime. For this a Windows user only needs rights in the corresponding
groups that are also set up in the OS configuration. The same applies for the PCS 7
"SIMATIC BATCH" and "SIMATIC Route Control" options.
● Logging onto SIMATIC Manager
For each project engineer you can create a Windows user in order to record configuration
changes in the change log. Windows users only require rights in the corresponding
SIMATIC logon groups.
Note
The following guidelines apply to creating a new user account in accordance with Microsoft
Windows Help:
● A user name may not be the same as another user or group name on the computer being
managed.
● The name may contain up to 20 small or upper case letters and figures.
● The characters " / \ [ ] : ; | = , + * ? < >" are not permitted in user names.
● A user name may not consist solely of periods (.) or spaces.
Compendium Part A - Configuration Guidelines (V8.2)
Configuration Manual, 08/2016, A5E38166869-AA
(https://support.industry.siemens.com/cs/ww/de/view/
Preparation and administration
4.2 Preparatory planning
(https://
23