3- Access Protection via both Protection Levels and User Management - References - SIMATIC AX - AX Hardware Engineering documentation - Hardware Engineering,

{
  "Devices": [
    {
      "Name": "Device1",
      "Modules": [
        {
          "Name": "PLC_1",
          "TypeIdentifier": {
            "OrderNumber": "6ES7 516-3AP03-0AB0",
            "Version": "V3.1"
          },
          "AccessProtection": {
            "AccessLevel": "NoAccess"
          },
          "UserManagement": {
            "Users": [
              {
                "Name": "User2",
                "AssignedRoles": [
                  "DownloadCapableRole"                  
                ]
              }
            ],
            "Roles": [
              {
                "Name": "DownloadCapableRole",
                "FunctionRights": [
                  "AccessProtectionFullAccess"
                ]
              }
            ]
          },
        }
      ]
    }
  ]
}