Siemens Simatic S7-1500R System Manual page 171

Protection
8.2 Configuring access protection for the CPU
Properties of the access levels
Each access level allows unrestricted access to certain functions without a password, for
example identification using the "Accessible devices" function.
The default setting of the CPUs is "No restriction" and "No password protection". In order to
protect access to the CPUs, you need to edit the properties of the CPUs and set up a
password. In the default access level "Full access (no protection)", every user can read and
change the hardware configuration and the blocks. No password is configured, and no
password is required for online access.
Communication between the CPUs via the communication functions in the blocks is not
restricted by the access level of the CPUs.
Entering the correct password enables access to all the functions that are allowed in the
given level.
Note
Configuring an access level does not replace know-how protection
Configuring access levels offers a high degree of protection against unauthorized changes to
the CPU through network access. Access levels restrict the rights to download the hardware
and software configuration to the CPUs. However, blocks on the SIMATIC memory card are
not write-protected or read-protected. Use know-how protection to protect the code of blocks
on the SIMATIC memory card.
Behavior of functions in different access levels
The STEP 7 online help includes a table listing the online functions available in the various
access levels.
170
S7-1500R/H redundant system
System Manual, 10/2018, A5E41814787-AA