Pilz 311502, Руководство по эксплуатации, Страница: 24 / 51

Configuration
Operating Manual PCOM sec br2
1004534-EN-04
| 24
8.3 Managing users
In order to access the device in the protected network via the SecurityBridge, a user must
log in from a client PC via VPN client, using his login data. A user account must be created
for each user in user management on the user interface.
Different access permissions can be defined for users. For this purpose user groups are
created, which are assigned specific, pre-defined permissions [ 24] .
The registration process is described in the chapter entitled Log in to client [ 34] .
See the user interface's online help for details of how to configure the user management.
8.3.1 Permissions
The permissions are used to define which actions a user group is permitted to perform.
The following permissions can be assigned to a user group:
Permission Description ID for
RADIUS
System permissions
Administration User can perform administrative functions on the Se-
curityBridge. However, he has no access to the pro-
tected system (PNOZmulti, PSS 4000) 1
User management User may create, change or delete entries in the
user management. 2
PSS 4000 permis-
sions
DeviceAdmin User may perform all online functions on the PSS
4000 system.
50
PNOZmulti permis-
sions
DeviceAdmin User may perform all online functions on the
PNOZmulti system.
100
ReadOnly On the PNOZmulti system, the user may only per-
form online functions that do not influence the status
of the system
101
Operator User may perform all online functions on the
PNOZmulti system, except changes to the project.
102
Network permissions
Modbus TCP User may access the Modbus/TCP server in the pro-
tected
PNOZmulti system.
150
Generic Device per-
missions
AccessGroup-1 User is allowed to access the Generic Device be-
longing to one of these three groups if he is assigned
to a user group with the same permission. 160
AccessGroup-2 161
AccessGroup-3 162