Configuring Access Protection For The Cpu - Siemens SIMATIC S7-1500 System Manual

Protection

8.2 Configuring access protection for the CPU

8.2 Configuring access protection for the CPU
Introduction
The CPU offers four access levels to limit access to specific functions.
By setting up the access levels and the passwords for a CPU, you limit the functions and
memory areas that are accessible without entering a password. The individual access levels
as well as their associated passwords are specified in the object properties of the CPU.
Access levels of the CPU
Table 8- 1
Access levels
Complete
access (no
protection)
Read access
HMI access
No access
(complete
protection)
A list of which functions are available in the different access levels is available in the "Setting
options for the protection" entry in the STEP 7 online help.
112
Access levels and access restrictions
Access restrictions
The hardware configuration and the blocks can be read and changed by all users.
With this access level, read-only access to the hardware configuration and the
blocks is possible without entering a password, which means you can download
hardware configuration and blocks to the programming device. In addition, HMI
access and access to diagnostics data is possible.
Without entering the password, you cannot load any blocks or hardware
configuration into the CPU. Additionally, the following are not possible without the
password: Writing test functions and firmware update (online).
With this access level only HMI access and access to diagnostics data is possible
without entering the password.
Without entering the password, you can neither load blocks and hardware
configuration into the CPU, nor load blocks and hardware configuration from the
CPU into the programming device. Additionally, the following are not possible
without the password: Test functions which write, changing the operating mode
(RUN/STOP), and firmware update (online).
When the CPU is completely protected, no read or write access to the hardware
configuration and the blocks is possible. HMI access is also not possible. The
server function for PUT/GET communication is disabled in this access level
(cannot be changed).
Authentication with the password will again provide you full access to the CPU.
Automation system
System Manual, 12/2014, A5E03461182-AC