Using The Display To Configure Additional Access Protection - Siemens SIMATIC S7-1500 Automation System System Manual

Protection

14.3 Using the display to configure additional access protection

Behavior of a password-protected CPU during operation
The CPU protection takes effect after the settings are downloaded in the CPU.
Before an online function is executed, the necessary permission is checked and, if
necessary, the user is prompted to enter a password. The functions protected by a password
can only be executed by one programming device/PC at any one time. Another programming
device/PC cannot log on.
Access authorization to the protected data is in effect for the duration of the online
connection, or until the access authorization is manually rescinded with "Online > Delete
access rights".
Access to a password-protected CPU in the RUN mode can be limited locally in the display
so that access with a password is also not possible.
14.3 Using the display to configure additional access protection
Introduction
On the display of an S7-1500, you can block access to a password-protected CPU (local
lock). The access lock is only in effect, when the operating mode switch is in the RUN
position.
The access lock applies independently of password protection, i.e. if someone accesses the
CPU via a connected programming device and has entered the correct password, access to
the CPU is still blocked.
The access block can be set separately for each access level on the display, so that, for
example, read access is allowed locally, but write access is not allowed locally.
Procedure
If an access level with a password is configured in STEP 7, access can be blocked using the
display.
Proceed as follows to set the local access protection for an S7-1500 CPU on the display:
1. On the display, select Settings > Protection menu.
2. Confirm the selection using "OK", and configure for each access level, whether access at
Access protection for the display
A password can be configured for the display in STEP 7 in the properties of the CPU so that
the local access protection is protected by a local password.
156
the RUN mode selector is allowed or not:
Allow: Access to the CPU is possible, provided the corresponding password in STEP 7 is
entered.
Deactivated in RUN: When the operating mode switch is in the RUN position, no more
users with privileges for this access level can log in to the CPU, even if they know the
password. In STOP mode, access is possible with password entry.
S7-1500 Automation System
System Manual, 01/2013, A5E03461182-01