Tab ‘Users and Groups’

Hint

Recommendations for Data Security In order to minimize the risk of data security violations, we recommend the following organizational and technical actions for the system where your applications are running. As far as possible, avoid exposing the PLC and control networks to open networks and the internet. Use additional data link layers for protection, such as a VPN for teleaccess and install firewall mechanisms. Limit access to authorized persons, change any existing standard passwords during the initial commissioning and continue to change them regularly.

On this tab of the generic device editor you edit the device user management of the controller.

Depending on how it is supported by the device, you can define user accounts and user groups. In combination with the configuration on the Access rights tab, you thus control access to control objects and files at runtime.

Requirements: The controller has a user management and allows it to be edited. You have login data in order to be able to log in to the controller.

Note

It is possible to apply user account definitions from the project user management into the device user management (see below: Import button).

Toolbar of the tab
Synchronization

Switches on and off the synchronization between the editor and the user management on the device.

If the button is not pressed, then the editor is blank or it contains a configuration that you loaded from the hard disk.

If the button is pressed, then CODESYS synchronizes the display in the editor continuously with the current user management on the connected device.

If you activate the synchronization while the editor contains a user configuration that is not synchronized with the device yet, then you are prompted what should happen to the editor contents. Options:

  • Upload from the device and overwrite the editor content: The configuration on the device is loaded into the editor, overwriting the current contents.
  • Download the editor content to the device and overwrite the user management there: The configuration in the editor is transferred to the device and applied there.
Import from disk

Opens the default dialog for selecting and importing a user management configuration from the hard disk.

When you click the button in the Users and Groups tab, the file type is Device user management files (*.dum).

When you click the button in the Access rights tab, the file type is Device rights management files (*.dum).
Export to disk Opens the default dialog for saving a file to the hard disk. This saves the user management configuration as an XML file. The data type is Device rights management files (*.drm).
Device user User name of the user currently logged in on the device
Users
All currently defined users, and below them their memberships of user groups, are listed in a tree structure.
Add Opens the Add user dialog for creating a new user account.
Import

Opens the dialog Import User. It displays all the user accounts defined in the project user management.

Select the desired entries and click OK in order to import them into the device user management. CAUTION: The passwords are NOT applied.
Edit Opens the dialog Edit user <user name>. It corresponds to the Add user dialog and you can change the settings of the user account.
Delete Deletes the account of the currently selected user.
Groups
All currently defined groups, and below them the users assigned to them, are listed in a tree structure.
Add

Opens the dialog Add group.

Define a new group name. From the list of defined users, select those that are to belong to the group. Confirm the selection with OK. The group appears in the tree.
Import

Opens the dialog Import User. It displays all the user groups defined in the project user management.

Select the desired entries and click OK in order to import them into the device user management.
Edit Opens the dialog Edit group <group name>. It corresponds to the Add group dialog and you can change the group definition.
Delete Deletes the currently selected group.
Add dialog ‘Add user’
Name Name of the new user
Default group Drop-down list with all configured user groups. Every user must belong to at least one group. You define this here as a default group.
Password  
Confirm password  
Password strength Password security in stages from Very weak to Very good.
Hide password : The password is shown only with asterisks “*” when it is typed in.
Password can be changed by the user  
Password must be changed at first login  

See also