2- Access Protection via User Management - References - SIMATIC AX - AX Hardware Engineering documentation - Hardware Engineering,

Access protection via User Management can be activated for a PLC via performing the following steps:

1. Assign one of the Access Protection Function Rights to a user via Assigning user rights for the PLC in the hardware declaration file.

An example user management configuration for access protection function right assignment could look like this:

{
  "Devices": [
    {
      "Name": "Device1",
      "Modules": [
        {
          "Name": "PLC_1",
          "TypeIdentifier": {
            "OrderNumber": "6ES7 516-3AP03-0AB0",
            "Version": "V3.1"
          },
          "UserManagement": {
            "Users": [
              {
                "Name": "User2",
                "AssignedRoles": [
                  "DownloadCapableRole"                  
                ]
              }
            ],
            "Roles": [
              {
                "Name": "DownloadCapableRole",
                "FunctionRights": [
                  "AccessProtectionFullAccess"
                ]
              }
            ]
          }
        }
      ]
    }
  ]
}

• In the example above, a single user named User2 is defined which is given the role DownloadCapableRole. As this role is granted AccessProtectionFullAccess function right, this user is allowed to perform a download onto the PLC_1.

• As User2 is the only defined user, and as there is no AccessProtection configuration defined in the hardware declaration file, all operations are prevented when User2 and its password are not provided.

• Create the user and assign a password to the User2 via manage user credentials.