Web Server - Siemens SIMATIC S7-1500 Function Manual

General information
2.2 Configuring the Web server
User "Everybody"
A user with the name "Everybody" is preset in the user list; this user has minimum access
rights. These are read-only access to the intro page and start page. The user "Everybody" is
defined without assigning a password, but you can assign all access authorizations available
in STEP 7 to it.
You can create a maximum of 20 users and a user "Everybody".
Since the user "Everybody" is defined in STEP 7 without assigning a password, pay attention
to which access authorizations you assign to this user.
Individual authorizations, such as the ability to change the operating state, can represent a
security risk.
When assigning security-relevant authorizations, we recommend that you create a user with
password protection in STEP 7.
For an F-CPU, do not assign the user "Everybody" the access authorization "Perform
changes as F-Admin".
Make sure that you observe the warnings relating to this in the section "Restoring a backup
of the safety program to an S7-300/1500 F-CPU" in the manual SIMATIC Safety -
Configuring and Programming
(http://support.automation.siemens.com/WW/view/en/54110126).
Passwords should always be more than 8 characters in length and contain uppercase and
lowercase characters as well as special characters and numbers (?!+%$1234...). Computer
keyboard character strings and words from the dictionary are unsuitable. Change the
password regularly.
Note
When assigning rights, note that read and write access to the watch tables and the tag
status is retained, even if you have deactivated the attribute "Accessible from HMI/OPC UA"
in the PLC tag table when configuring the data block in STEP 7.
User-defined pages
In the "User-defined pages" area you can download your own web pages to the CPU and
make your own web applications available via the web browser.
You can find additional information in section User pages (Page 120).
28
WARNING
Function Manual, 11/2019, A5E03484625-AG

Web server