WinCC Basic V13 SP1 – Simple Sample: Users – access restriction

“Simple Samples” are small projects that demonstrate simple features. The target is give a quick overview about the theme and be used as start point for related discussions. Follow there are a short description and the configuration main steps.

Description:

Access restrictions based on Users limits the user to perform buttons commands depending of his authorizations. It could be used for several targets (like to block access to screens). In this example, depending of logged user (John, Steve, Lee, Bill) it is possible to change tags (by button or IO field).

The principle is:

1 – Actions (e.g. Buttons and IO field) are linked with authorizations definitions

2 – User groups defines typical case of users and these respective authorizations

3 – User are defined and linked to User groups

User ↔ User Group (set of Authorizations) ↔ Authorization ↔ object access restriction

Logon dialog is showed automatically when the actual user tries to perform a non authorized action.

The users could be managed online by User View object (the features are limited conform the user authorization settings).

Requirements:

WinCC Basic V13 SP1.

Project with a minimum configuration (stop button, tags, etc.).

Configuration main steps:

• Create how many authorizations as necessary (each authorizations represents a group of actions that have same restrictions rules). In our example it was created three authorizations (Authorization_1, Authorization_2, Authorization_3: project tree → HMI → User Administrator → User groups tab → Authorization division).

• Create Groups and assign authorizations to them (Group_1, Group_2, Group_3: project tree → HMI → User Administrator → User groups tab → Group division).

• Create Users and assign a password and user group (John, Steve, Lee, Bill: project tree → HMI → User Administrator → Users tab → Users / Group division).

• Define the Authorization for the objects that should have a restricted access (Object properties → Security → Runtime Security → Authorization)

Optional: call Logon Dialog

• Place a button, on events (e.g. click) add the function

Optional: manage online User / Password

• Place a User view object (toolbox → Controls)

Note: in this example, just the Administrator user can manage all users.

Note:

• Important settings (regards to password structure and validity) are defined in project tree → HMI → runtime settings → User administration.

• The settings “Enable limit for logon attemps” leave to block the user if the operator make more than “Number of incorrect logon tentaives”.

References:

Manual

WinCC Professional V13.0

https://support.industry.siemens.com/cs/br/pt/view/92323076/en

Online helps system

WinCC Professional V13.0 SP1

https://support.industry.siemens.com/cs/br/pt/view/109096785/en

Application and tools

Demo projects for HMI operator panels under WinCC V13 (TIA Portal) for Basic Panels (2nd generation) and Comfort Panels

https://support.industry.siemens.com/cs/br/pt/view/96003274/en

FAQ

Which VBS information and VBS programming tools are there in WinCC (TIA Portal)?

https://support.industry.siemens.com/cs/br/pt/view/59885894/en

Tips and tricks for creating scripts in WinCC (TIA Portal)

https://support.industry.siemens.com/cs/br/pt/view/57132412/en

Images:

Due a size/ format restrictions, the images are first compacted with 7z format (images.z7) and after that attached to a zip archive (data.zip).

Project:

Due a size/ format restrictions, the project are first compacted with 7z format (project.z7) and after that attached to a zip archive (data.zip).