Siemens SIMATIC S7-1500 Function Manual page 196

Requirement
Before you can edit the security settings, the project must be protected and you must be
logged on with sufficient rights, for example as administrator.
Settings in the project tree > "Security settings"
You access the central user settings and roles in the protected project in the project tree
under "Security settings". This is where you centrally define users with user name, password
and function rights. You can simply use these settings elsewhere.
Figure 9-23
Reusing central security settings
Examples for reusing elsewhere:
● User selection for user authentication for OPC UA server
With this setting, you tell the server which client (user) with which user name and which
password is allowed to access the server.
● User selection for OPC UA client authentication
With this setting, you tell the client the user name and password that it is to use for client
authentication for the server.
The settings for the client and server must correspond: The user name and password used
by the client to log on must have been set up on the server and assigned the required
authorizations.
Function rights for server and client
The corresponding function rights for the client or the server must also be enabled for users
of the client function and users of the server function on an S7-1500 CPU. It is not enough
simply to save the user name and password centrally.
Here is an example to illustrate this type of rights use.
1. Under "Security settings > Users and roles", you define a new role in the "Roles" tab with
the name "PLC-opcua-role-all-inclusive", for example.
Tip: The tab may be covered by an information window ("The current status has not yet
been checked..."). In this case, first close the information window.
2. In the "Categories of function rights" section, you navigate to the runtime rights and then
to the CPU function rights, and select the CPU whose function rights you want to set, for
example PLC_2.
Communication
Function Manual, 11/2019, A5E03735815-AH
Setting user and roles
OPC UA communication
9.3 Using the S7-1500 as an OPC UA server
195