Tab: User Management: Legacy

Symbol:

On the User Management tab, visualization groups and users are managed independently of the device user management.

Tab: Groups

Group Name	Example: `VISU_GRP 1` When you click the node, all users are listed that belong to the group.
Automatic Logout	: The Logout Time input field is active and editable.
Logout Time	Time (integer value) after which a visualization user is automatically logged out if no input is provided Select a time unit from the list box. Possible values: sec, min, or hr
Permission to Change User Data	: The permission to edit user data when the visualization is in online mode is granted to the group.
Description	The text is visible in the development system only. It is not downloaded to the controller.
ID	Unique ID for each group. Assigned automatically by the system

Table 30. Keyboard and mouse input

In the last row of the table, click in the Group Name field and specify the name for the new group.

A new group is added.

Select a group and press Del.

The selected group is deleted.

Note: The None group cannot be deleted.

Table 31. Buttons (right side)

,	Moves the selected group one line up or down, thus changing the hierarchy of the group Important: A group with a higher hierarchy cannot have fewer permissions for an element than a group with a lower hierarchy.

Table 32. Buttons (below)

Update Visualizations/Hotkeys	Opens the Update Visualizations and Hotkeys dialog There you can configure and start an application-wide update for the permissions in visualization objects.
List Usage of Groups	The Messages view notifies you about which visualization elements and hotkeys are configured with restricted permissions. For more information, see: Update Visualizations and Hotkeys
Convert to Runtime Based	The user management is converted to the runtime-based user management. At this time, settings such as the user list, are lost in the process. For more information, see: User Management: Runtime Based
Export Groups for Global Visualizations	The created groups are exported and transmitted to Tools → Options → Visualization User Management. There they are listed in the Use the following visualization user group list input field. The entry cannot be changed.
Delete Complete User Management	Deletes the visualization user management The initial view is displayed with the Create Empty Runtime Based User Management and Create Runtime Based User Management with Default Groups buttons. For more information, see: User Management: Runtime Based
Export User Management	Select a version-dependent storage format: Lower than V3.5 SP6 V3.5 SP6 and higher A default dialog opens. There you can save the user management configuration as a CSV file as any name in any directory.
Import User Management	A default dialog opens. There you can import a previously stored user management configuration (CSV file).

Tab: Users

Tip

This tab is displayed only for legacy user management. With runtime-based visualization user management, you can add, edit, or remove the users in the device user management of the controller.

Login name	Unique name for the user to log in to the visualization at runtime
Full name	This name may exist more than one time in the user management.
Password	Encrypted by CODESYS. By default, the Login name is displayed here. If you click the Password field of a selected line, then the Change Password dialog opens.
User group	User Groups the User Belongs to Click the User group field of a selected user to open the User Groups the User Belongs to dialog. Groups Assigned: : The user is assigned to this group.
Deactivate	: The user is disabled.
Description	Descriptive text is available in the development system only and is not downloaded to the controller

Table 33. Buttons

Upload User from Device	The data of the user management is uploaded from the controller. If user data is already configured. then it is overwritten
Download User to Device	The data of the user management is downloaded to the controller. The existing user management on the controller is overwritten.
Export User Management	. The list box opens. Lower than V3.5 SP6 V3.5 SP6 and higher A default dialog opens for saving the user management as a CSV file with any name in any directory.
Import User Management	A default dialog opens for selecting the user management (in CSV format) from the file system.

Tab: Settings

Settings for Download of User Data
Download on every login	: The data of the user management is downloaded to the controller at each login. Any existing data is overwritten.
Never download on login	: The data of the user management is never downloaded to the controller, even if it changes.
Allow decision on every download	: A Warning dialog opens for you to accept or refuse the download.
Access Rights for Elements
Use group hierarchy	: The permissions can be granted to the group hierarchy of the Groups tab only. The group in the first line of the Group list is the highest in the hierarchy. A group of a higher hierarchy cannot have fewer permissions for an element than a group of a lower hierarchy.
Logout Behavior
Switch to start visualization when logging out, not relevant for WebVisu	: Switches at logout to the visualization which is configured as the Start visualization in the respective display variant.

Login Settings
Apply login restrictions	: The settings Maximum number of authentication attempts and User lockout are used for the visualizations of the application.
Maximum number of authentication attempts	Possible values: [1..10] When the maximum number of authentication attempts is reached, the user is locked out either temporarily or permanently, depending on the User lockout settings.
User lockout	Permanent lockout: The user is locked out indefinitely. Note: Users with Permission to Change User Data cannot be locked out indefinitely. In this case, users have a fixed temporary lockout time of 10 minutes. Temporary lockout time: Temporary lockout time (in minutes); possible values [1..2880] Note: The lockout time applies to all users, including those with the Permission to Change User Data.

CSV file with the data for user management

The data for user management is saved to a CSV file in the following format:

User groups: ID;group name; automatic logoff TRUE/FALSE;logoff time;unit logoff time;permission to change user date TRUE/FALSE
Users: login name;full name;password encrypt TRUE/FALSE;password;group ID;user deactivated TRUE/FALSE

Use this format when you want to edit data for user management by means of any tool. If you set password encrypt to FALSE, then an unencrypted password can be used. In the example, the unencrypted password Yellow was entered for the user Hugo. If you import the CSV file by means of the Import User Management command, then the password is encrypted automatically.

Example 33. Example

V1.0.0.1
Usergroups:
1;Admin;TRUE;1;Minute;TRUE
3;Operator;FALSE;1;Minute;FALSE
7;Service;FALSE;1;Minute;FALSE
0;None;FALSE;1;Minute;FALSE
4;Early and late shift;FALSE;1;Minute;FALSE
2;Early shift;TRUE;1;Minute;FALSE
6;Late shift;FALSE;1;Minute;FALSE
User:
Service;Service;TRUE;C08298D42A35732CFFB7DF43771B7607;2;FALSE
Operator;Operator;TRUE;3D94AB9540B025B07773DE7037F19837;3;FALSE
John;Blue;TRUE;62ED5DE29E5DD4164A01F3AF1B81EFA0;4;FALSE
Paul;White;TRUE;01E2CBD4AE5442D9EACE33669549A3CC;2;FALSE
Hugo;Green;FALSE;Yellow;6;FALSE