To allow access to the OPC UA server for a user and allow to manage certificate the corresponding function rights need to be assigned to the user in the hardware declaration file.
The following function rights for the OPC UA server are supported:
| Function rights | Description |
|---|---|
OpcUAServerAccess |
User with this right can access to the OPC UA server. |
OpcUAManageCertificates |
User with this right can transfer certificates, CRLs (Certificate Revocation Lists) or trusted lists to the CPU at runtime. |
An example file snippet (example.hwl.json) could look like this:
"UserManagement": {
"Roles": [
{
"Name": "OpcUaServerAccessRole",
"FunctionRights": [
"OpcUAServerAccess",
"OpcUAManageCertificates"
]
}
],
"Users": [
{
"Name": "user1",
"AssignedRoles": [
"OpcUaServerAccessRole"
]
}
]
}