Tab ‘Visualization manager’ -‘User management’

Symbol: 04232160bf64378fc0a8640e0183dca4_1add7ec7642deb76c0a8640e0104515e

The User management tab is used for creating and configuring the user management for visualizations and their users and groups.

If a user management has not been configured yet, then the following buttons are available:
Create empty user management The user management opens. The None group is created.
Create user management with default groups and users

The user management opens. The following groups and users are created:

  • Admin group with Admin user
  • Service group with Service user
  • Operator group Operator user
  • None group

Project with multiple visualization user managements

Choose between local and remote user management
Requirement: The project includes several devices with a visualization user management.
Use local user management The user management of this visualization manager is used for the visualization.
Use remote user management Drop-down list with all devices of the project that have their own visualization user management.

Visualization user management on the controller for a visualization without a display variant

Even if there are no display variants of the visualization in the application, it may be required that the visualization user management is located on the controller. This is the case, for example, when HMIs connect to the controller.

Requirement: The visualization does not have any display variants or only HMI visualizations objects. This means that the objects Web visualization, Target visualization, or Remote target visualization are inserted below the visualization manager.
Use user management in PLC: This option must be activated if HMIs should be connected to this central user management. 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The user management is downloaded to the controller.

See also

Tab ‘Groups’

Group name When you click the node, all users are listed that belong to the group.
Automatic logout 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The Logout time input field is active and editable.
Logout time

Input field for integer value

Drop-down list for time unit Min, Sec, or Hr
Permission to change user data 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The group is granted permission to edit user data when the visualization is in online mode.
Description The text is visible in the development system only. It is not downloaded to the controller.
ID Unique ID for each group. Assigned automatically by the system.
Add a new group In the last row of the table, click in the Group name field and specify the name for the new group.
Delete a group Select a group and press Del. The None group cannot be deleted.
Buttons
Update visualizations / hotkeys

Opens the Update visualizations and hotkeys dialog box.

Update, if groups were changed at a time when visualizations or keyboard shortcuts already had restricted permissions.
List usage of groups

List of visualizations and keyboard shortcuts with restricted permissions.

The list is displayed in the Messages view.
Export groups for global visualizations The defined group names are transmitted to Tools ‣ Options ‣ Visualization user management. They are then listed in Use the following user group list for the visualization. The list can be changed there as well.
Delete complete user management

The user management is deleted and the start view is shown with the following buttons:

Create empty user management and

Create user management with default groups and users.
Export user management

The drop-down list opens.

  • Before V3.5 SP6
  • V3.5 SP6 and later

A standard dialog opens for saving the user management as a CSV file with any name in any directory.
Import user management A standard dialog opens for importing a user management. the user management must be a CSV file.
04232160bf64378fc0a8640e0183dca4_e06ed70adfb70c6ec0a8640e0037d44a , 04232160bf64378fc0a8640e0183dca4_8bc77271dfb63bf8c0a8640e00da7e5c

Moves the selected group one line up/down, thus changing the hierarchy of the group.

A group of a higher hierarchy cannot have fewer permissions for an element than a group of a lower hierarchy.
Dialog box Update visualizations and hotkeys
This dialog updates only visualization elements and keyboard shortcuts with configured permissions.
Add new group

Drop-down list with all new created groups of this user management.

Requirement: A new user group was created.
Setting for new group
  • new group in visualization / hotkey will get the right like group: Drop-down list with all existing groups of this user management
  • new group should get the following right
    • for visualization elements: Drop-down list with the permissions: Operable, Only visible, and Invisible.
    • for hotkeys: Drop-down list with the permissions: Operable, Not operable.
Delete not existing groups If no affected visualization elements or keyboard shortcuts are found for updating, then this is displayed as a message in the Messages view (Visualization category).
Rename groups
Update Updates the permissions of the affected visualization elements and keyboard shortcuts

Tab ‘User’

Login name

Name for the user to log in to the visualization at runtime.

This name is unique.
Full name This name may exist more than one time in the user management.
Password

Encrypted by CODESYS. By default, the Login name is displayed here.

If you click the Password field of a selected line, then the Change password dialog box opens.
User group

Group(s) that the user belongs to.

Clicking the User group field of a selected user opens the dialog box User groups the user belongs to.

  • Groups
  • Assigned: 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The user is assigned to this group.
Deactivate 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The user is deactivated.
Description Descriptive text is available in the development system only and is not downloaded to the controller.
Buttons
Upload user from device

The data of the user management is uploaded from the controller.

If user data is already configured. then it is overwritten.
Download user to device

The data of the user management is downloaded to the controller.

The existing user management on the controller is overwritten.
Export user management

The drop-down list opens.

  • Before V3.5 SP6
  • V3.5 SP6 and later

A standard dialog opens for saving the user management as a CSV file with any name in any directory.
Import user management A standard dialog opens for selecting the user management (in CSV format) from the file system.

Tab ‘Settings’

Settings for download of user data
Download at each login

The data of the user management is downloaded to the controller at login.

Existing data is overwritten.
No download at login The data of the user management is never downloaded to the controller, even if it changes.
Allow decision on every download A Warning dialog box opens for you to accept or refuse the download.
Access rights for elements
Use group hierarchy

04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The permissions can be granted to the group hierarchy of the Groups tab only.

The group in the first line of the Group list is the highest in the hierarchy.

A group of a higher hierarchy cannot have fewer permissions for an element than a group of a lower hierarchy.
Logout behavior
Change to start visualization at logout 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : Switches at logout to the visualization that is configured as the Start visualization in the respective display variant.
Login settings
Apply login restrictions 04232160bf64378fc0a8640e0183dca4_9a3f06830c0506c5c0a8640e012f0ace : The settings Maximum number of authentication attempts and User lockout are used for the visualizations of the application.
Maximum number of authentication attempts

Possible values: [1…10]

When the maximum number of authentication attempts is reached, the user is locked out either temporarily or permanently, depending on the User lockout settings.
User lockout

  • Permanent lockout: The user is locked out indefinitely.

    Info: Users with the Permission to change user data cannot be locked out indefinitely.

  • Temporary lockout time: Value in minutes; possible values [1…2880]

    Note: Users with the Permission to change user data always have a temporary lockout of 10 minutes, even if another value is specified at this location.

CSV file with the data for user management

The data for user management is saved to a CSV file in the following format:

  • User groups: ID;group name; automatic logoff TRUE/FALSE;logoff time;unit logoff time;permission to change user date TRUE/FALSE
  • Users: login name;full name;password encrypt TRUE/FALSE;password;group ID;user deactivated TRUE/FALSE

Use this format when you want to edit data for user management by means of any tool. If you set password encrypt to FALSE, then an unencrypted password can be used. In the example, the unencrypted password Yellow was specified for the user Hugo. If you import the CSV file with the command Import user management, then the password is encrypted automatically.

V1.0.0.1
Usergroups:
1;Admin;TRUE;1;Minute;TRUE
3;Operator;FALSE;1;Minute;FALSE
7;Service;FALSE;1;Minute;FALSE
0;None;FALSE;1;Minute;FALSE
4;Early and late shift;FALSE;1;Minute;FALSE
2;Early shift;TRUE;1;Minute;FALSE
6;Late shift;FALSE;1;Minute;FALSE
User:
Service;Service;TRUE;C08298D42A35732CFFB7DF43771B7607;2;FALSE
Operator;Operator;TRUE;3D94AB9540B025B07773DE7037F19837;3;FALSE
John;Blue;TRUE;62ED5DE29E5DD4164A01F3AF1B81EFA0;4;FALSE
Paul;White;TRUE;01E2CBD4AE5442D9EACE33669549A3CC;2;FALSE
Hugo;Green;FALSE;Yellow;6;FALSE

See also