Siemens SIMATIC S7-1500 System Manual page 345

Protection
11.3 Local user management
The following figure shows the assignment of the role with full access to a user ("Admin").
Figure 11-2 Assigning a role to a user
Requirement
CPU parameterization: To make use of users, roles and function rights for a CPU, the "Enable
access control" option must be selected in the "Protection & Security > Access control" area.
No project protection is required for local user administration.
Default characteristics
The "Activate access control" option is preset for the access control. Users can be configured
with their assigned passwords and their roles and function rights.
Downloading to device
You can load changes to the local user management and access control configuration in
STOP, RUN-Solo and RUN-Redundant system state of the CPU.
Runtime timeout
You can set a runtime timeout for both the role and the user in 'Security settings > Users and
roles'.
For an R/H-CPU, these settings are taken into account by the various services as follows:
• By means of the Web API you can, for example, create a web page or application that
takes the settings for the runtime timeout into account. Standard web pages do not take
the settings for the runtime timeout into account and use the default value.
• The other services (PG/HMI communication and OPC UA server) do not use the runtime
timeout; the logged-in user is not logged out after the set time.
344
S7-1500R/H redundant system
System Manual, 01/2024, A5E41814787-AF