5.6.3.3
Access protection for parameter lists in the web server
Default rights for parameter lists
Three standard rights are specified for the parameter lists:
Standard
right
Explanation
Change list
The user can create, change, or delete a list.
Read
The user can read the parameters from the list.
Write
The user can write and save the parameters from the list.
The access rights for the parameter lists are predefined as follows:
Situation:
"SINAMICS" rights
"Administrator" rights
"SINAMICS" user is creating a list
Change list / Read
Change list / Read / Write
"Administrator" user is creating a list
Read
Change list / Read / Write
You can change the rights of individual parameter lists based on the default settings shown in
the table.
● The "SINAMICS" and "Administrator" users can reduce their own rights.
● The "Administrator" user can reduce the rights of "SINAMICS" users or expand them up to
their own level.
Note
For security reasons, as the "Administrator" user, you should never assign the "SINAMICS"
user with the "write" and "change list" rights at the same time.
NOTICE
Tampering with the converter parameter assignment resulting from password theft
If unauthorized persons obtain a user's login data, they can manipulate the parameter
assignment and cause damage.
● For your drive, activate the know-how protection. For more information, refer to the chapter
titled "Know-how protection".
● Ensure that especially critical parameters are not included in the OEM exception list.
Changing access rights to parameter lists in the web server
1. Start the web server. For more information, refer to the chapter titled Starting the web
2. Click the "Parameter" entry in the navigation.
The parameter display on the right in the browser becomes active. The "Define" tab is
displayed.
3. Click the "Define" tab.
All parameter lists are displayed in the "List name" drop-down list.
Security measures for SINAMICS
5.6 Web server
Industrial Security
Configuration Manual, 08/2017, A5E36912609A
61
