Defining Access Rights In The Operating System - Siemens SIMATIC HMI Series System Manual

WinCC Release Notes
2.2 Notes on operation
2.2.2

Defining Access Rights in the Operating System

Introduction
To support you in protecting your system, WinCC offers a structured user management:
● Protect your system against unauthorized access.
● Assign each user the required rights.
In order to work with WinCC, certain folders can be enabled for access via the network. For
security reasons, you should only assign access rights to these folders to authorized users.
You manage access rights via the Windows Standard user groups and user groups created
by WinCC.
Access rights specified in WinCC
Following WinCC installation, WinCC automatically establishes the following local groups in
Windows User and Group Administration:
● "SIMATIC HMI"
All users must be members of the "SIMATIC HMI" user group. These members may create
local projects, and may process, start, and access these projects remotely. Access to the
WinCC database is limited to the minimum rights necessary (read/write). By default, the
user who carries out the WinCC installation and the local administrator are members of this
group. Additional members must be added manually by an administrator.
● "SIMATIC HMI Viewer"
These members have read access only to configuration and runtime data in the WinCC
database. This group is primarily used for accounts for Web publication services, e.g., IIS
(Internet Information Services) account for operation of WinCC WebNavigator.
● Access to folder "<Installation Directory>/WinCC/aplib"
Following installation, the directory "Installation Directory/WinCC/aplib" named
"SCRIPTFCT" is unlocked for the "SIMATIC HMI" user group. This directory contains
central libraries for project script functions.
User Groups and User Rights
The following overview contains the tasks of the different user groups with the access rights
and instructions required to assign these access rights.
WinCC Installation
● Task: WinCC Installation
● Role: Configuration engineer, Administrator
● Authorization: Windows Administrator rights
● Procedure:
Prior to installation, ensure that you have local administrator rights on the computer.
● Explanation:
You need local administrator rights to install WinCC.
56
WinCC: General information and installation
System Manual, 02/2017, A5E40840020-AA