Managing Users; Permissions - Pilz PCOM sec br2 Operating Manual

Configuration
8.3

Managing users

In order to access the device in the protected network via the SecurityBridge, a user must
log in from a client PC via VPN client, using his login data. A user account must be created
for each user in user management on the user interface.
Different access permissions can be defined for users. For this purpose user groups are
created, which are assigned specific, pre-defined
The registration process is described in the chapter entitled
See the user interface's online help for details of how to configure the user management.
8.3.1

Permissions

The permissions are used to define which actions a user group is permitted to perform.
The following permissions can be assigned to a user group:
Permission
System permissions
Administration
User management
PSS 4000 permis-
sions
DeviceAdmin
PNOZmulti permis-
sions
DeviceAdmin
ReadOnly
Operator
Network permissions
Modbus TCP
Generic Device per-
missions
AccessGroup-1
AccessGroup-2
AccessGroup-3
Operating Manual PCOM sec br2
1004534-EN-04
Description
User can perform administrative functions on the Se-
curityBridge. However, he has no access to the pro-
tected system (PNOZmulti, PSS 4000)
User may create, change or delete entries in the
user management.
User may perform all online functions on the PSS
4000 system.
User may perform all online functions on the
PNOZmulti system.
On the PNOZmulti system, the user may only per-
form online functions that do not influence the status
of the system
User may perform all online functions on the
PNOZmulti system, except changes to the project.
User may access the Modbus/TCP server in the pro-
tected PNOZmulti system.
User is allowed to access the Generic Device be-
longing to one of these three groups if he is assigned
to a user group with the same permission.
permissions [ 24].
Log in to client [ 34].
ID for
RADIUS
1
2
50
100
101
102
150
160
161
162
| 24