Access Protection; Configuring Access Protection For The Cpu In Step 7 - Siemens SIMATIC S7-1500 Operating Instructions Manual

8.3

Access protection

8.3.1

Configuring access protection for the CPU in STEP 7

Introduction
The CPU offers four access levels, in order to limit access to specific functions.
By setting up the access level and the passwords for a CPU, you limit the functions and
memory areas that are accessible without entering a password. The individual access levels
as well as the entry of their associated passwords are specified in the object properties of
the CPU.
Access levels of the CPU
The following table provides you with an overview of the access levels of the CPU:
Access levels
Full access including fail-
safe (no
protection)
Full access (no protection)
Read access
HMI access
No access (complete pro-
tection)
Each access level allows unrestricted access to certain functions without entering a
password, e.g. identification using the "Accessible devices" function.
CPU 1505SP (F) Ready4Linux Version 2.7
Operating Instructions, 05/2019, A5E46864285-AA
Access restrictions
Every user can change fail-safe blocks.
Every user can read and change the hardware configuration and the blocks. The writing of
fail-safe modules is excluded.
With this access level, read-only access to the hardware configuration and the blocks is
possible without entering a password, which means you can download the hardware configu-
ration and blocks to the programming device. In addition, HMI access and access to diag-
nostics data is possible.
No blocks or hardware configuration can be loaded into the CPU without first entering the
password. In addition, the following is not possible without a password: Writing test functions
and firmware updates (online).
With this access level only HMI access and access to diagnostics data is possible without
entering the password.
Without entering the password, you can neither load blocks nor the hardware configuration
into the CPU, nor load blocks and hardware configuration from the CPU into the program-
ming device.
In addition, the following is not possible without a password: Test functions, changing the
operating mode (RUN/STOP), firmware update and display of online/offline comparison
status.
When the CPU has complete protection, no read or write access to the hardware configura-
tion and the blocks is possible (without access authorization in the form of a password). HMI
access is also not possible.
The server function for PUT/GET communication is disabled in this access level (cannot be
changed).
Authentication with the password will again provide you full access to the CPU.
Protection
8.3 Access protection
79