Siemens SIMATIC S7-1500 System Manual page 59

Access protection example
You can choose from four or five (with HF-CPU) different access levels in STEP 7 to restrict
user access to functions and memory areas.
Figure 4-21 Access protection
If you only want to allow users access over HMI, for example, select the access level "HMI
access" in the TIA Portal. Only HMI access and access to diagnostics data is then possible
without entering a password.
Users can read and write tags over an HMI device with this access level.
Users cannot:
• Download blocks or the hardware configuration to the CPU
• Upload blocks or the hardware configuration from the CPU to the PG/PC
• Run writing test functions
• Change the operating state from the PG/PC
• Run firmware updates
Advantages and customer benefits of protection functions
The protection functions listed above protect your investments from unauthorized access and
manipulation, helping to secure plant availability.
PG/PC and HMI communication
With STEP 7 and WinCC as of Version V17, R/H-CPUs from firmware version 2.9 support
innovated and standardized secure PG/PC and HMI communication – referred to as Secure
PG/HMI communication for short.
Reference
You can find additional information on the protection functions described in the section
Protection (Page 236) and in the STEP 7 online help.
Siemens products and solutions are only one element of a comprehensive industrial security
concept. Please note the additional information on Industrial Security
(http://www.siemens.com/industrialsecurity).
S7-1500R/H redundant system
System Manual, 11/2022, A5E41814787-AD
System overview
4.3 S7-1500 R/H-CPUs
59