
Runtime functionalities of a project
8.7 Safety
TP 270, OP 270, MP 270B (WinCC flexible)
Operating Instructions, Edition 03/2004, 6AV6691-1DD01-0AB0
8-7
8.7 Safety
Overview
Operation in Runtime is protected by the use of user groups, passwords and logoff times.
After starting Runtime, type in the user name and password in the login dialog.
User groups
The security concept of WinCC flexible is organized in several layers. It is based on
authorizations, user groups and users.
•
User groups are created for specific projects by the project engineer. The
"Administrators" group is included in all projects by default. User groups are assigned
authorizations. The operation authorizations for individual user groups are specifically
defined for all individual objects and functions in the project.
•
User accounts are created by the project engineer or by the administrator in Runtime or
by a user with the same rights. Users are always assigned to only one group.
After the project has been transferred, the system contains the "Admin" user who belongs to
the "Administrators" group (group with maximum rights) and the user accounts created by
the project engineer. Any further user accounts are created by the administrator as required.
Users belonging to the group with "Administration" authorization may create further user
accounts and assign these to a group.
Passwords
Only registered users may log on to Runtime by entering their user names and passwords.
The passwords can be assigned by the project engineer, by the "Admin" user (or by users
who have "Administration" authorization), or by the user.
Which functions a user may execute after login depends on which user group he/she is
assigned to.
After the initial transfer of the project, only the administrator is authorized to create user
accounts and user groups and to change passwords. Any further users assigned to the
"Administrator" group by the administrator can also perform these tasks.
The list will be encrypted and saved on the HMI device to protect it from loss due to a power
failure.