Table of Access Rights SPPA-T3000 before PAC after PAC

User-Roles User-Roles
valid for SW release(s): 04.07.01, 04.14.05 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
NAL Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
experienced perienced
Access Title RIGHT 4)
Acknowledge alarms x x x x x x x x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x x x x x x x x
Activate and deactivate changes x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x x x x x x x x
Archive administration x x x x
Automatic / manual selection x x x x x x x x x x x x x x x x x x
Change Call Home configuration x x x x
Change notes x x x x x x x x x x x x x x x x x x
Change parameters (Level 1) x x x x x x x x x x x x
Change parameters (Level 2) x x x x x x x x x x x
Change parameters (Level 3) x x x x x x x x x x
Change the graphic of function diagrams (x/y coordinates)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x x x x
Close Loop x x x x x x x x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Compare Project Versions x x x x x x x x

Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x x x x
Create Project version x x x x x x
Define and change user rights x x x x
Delete archived reports x x x x x x x x x x x x x x x x x x
Edit Report Archive x x x x x x x x x x x x x x x x x x x
Edit report definitions x x x x x x x x x x x x x x x x
Edit reports x x x x x x x x x x x x x x x x x x x x
Edit Report Types x x x x x x x x
Force Ports x x x x x x x x x x x x x
Maintenance x x x x x x x x x x
Manual scheduling x x1)
Manual Track x x x x x x x x x x x x x x x x x x
Open Reports x x x x x x x x x x x x x x x x x x x x
Operate x x x x x x x x x x x x x x x x x x
Printer administration x x x x
Project administration x x x x
Read diagnostic data x x x x x x x x x x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x x x x x x x x x
Select auto acknowledgment x
Set the workbench to engineering mode x x x x x x x x x x
Set the workbench to operating mode x x x x x x x x x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x x x
Single Step x x x x x x x x x x x
Storage on removable media (DVDs) x x x x x x x x
Suppress alarms for display x
Suppress alarms for display and archive
System administration x x x x
System logging x x x x
System upgrade x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3) x3) x3) x3)
Test Prototypes (Instantiate not released prototypes) x
Temporary Supervisor login x x x x x x x x x x x x x x
Temporary Threshold x meaning of right is currently unknown meaning of right is currently unknown
View alarms x x x x x x x x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
contains higher ranking rights over equipment protection (may affect personal and equipment safety)
Impact of Access Right onto Process Control/Engineering data:
Medium Impact: engineering data/designed process control can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid für System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.

Unrestricted SPPA-T3000 ACCESS RIGHTS 1 of 35 522468834.xls

 User-Roles User-Roles
valid for SW release(s): 04.07.01, 04.14.05 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
NAL Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
experienced perienced
Access Title RIGHT 4)

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role
has to be assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.

Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted SPPA-T3000 ACCESS RIGHTS 2 of 35 522468834.xls

Table of Access Rights SPPA-T3000 before PAC after PAC
User-Roles User-Roles
valid for SW release(s): 04.15.04 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
NAL Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
experienced perienced
Access Title RIGHT 4)
Acknowledge alarms x x x x x x x x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x x x x x x x x
Activate and deactivate changes x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x x x x x x x x
Archive administration x x x x
Automatic / manual selection x x x x x x x x x x x x x x x x x x
Change Call Home configuration x x x x
Change notes x x x x x x x x x x x x x x x x x x
Change parameters (Level 1) x x x x x x x x x x x x
Change parameters (Level 2) x x x x x x x x x x x
Change parameters (Level 3) x x x x x x x x x x
Change the graphic of function diagrams (x/y coordinates)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x x x x
Close Loop x x x x x x x x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Compare Project Versions x x x x x x x x

Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x x x x
Create Project version x x x x x x
Define and change user rights x x x x
Delete archived reports x x x x x x x x x x x x x x x x x x
Edit Report Archive x x x x x x x x x x x x x x x x x x x
Edit report definitions x x x x x x x x x x x x x x x x
Edit reports x x x x x x x x x x x x x x x x x x x x
Edit Report Types x x x x x x x x
Force Ports x x x x x x x x x x x x x
Maintenance x x x x x x x x x x
Manual scheduling x x1)
Manual Track x x x x x x x x x x x x x x x x x x
Open Reports x x x x x x x x x x x x x x x x x x x x
Operate x x x x x x x x x x x x x x x x x x
Printer administration x x x x
Project administration x x x x
Read diagnostic data x x x x x x x x x x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x x x x x x x x x
Select auto acknowledgment x
Set the workbench to engineering mode x x x x x x x x x x
Set the workbench to operating mode x x x x x x x x x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x x x
Single Step x x x x x x x x x x x
Storage on removable media (DVDs) x x x x x x x x
Suppress alarms for display x
Suppress alarms for display and archive
System administration x x x x
System logging x x x x
System upgrade x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3) x3) x3) x3)
Test Prototypes (Instantiate not released prototypes) x
Temporary Supervisor login x x x x x x x x x x x x x x
Temporary Threshold x meaning of right is currently unknown meaning of right is currently unknown
View alarms x x x x x x x x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
contains higher ranking rights over equipment protection (may affect personal and equipment safety)
Impact of Access Right onto Process Control/Engineering data:
Medium Impact: engineering data/designed process control can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid für System Administration

Unrestricted
x1) Activate right only as long as required.
x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role
has to be assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.

Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted
Table of Access Rights SPPA-T3000 before PAC after PAC
User-Roles User-Roles
valid for SW release(s): 04.27.01 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
NAL Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
experienced perienced
Access Title RIGHT 4)
Acknowledge alarms x x x x x x x x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x x x x x x x x
Activate and deactivate changes x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x x x x x x x x
Archive administration x x x x
Automatic / manual selection x x x x x x x x x x x x x x x x x x
Change Call Home configuration x x x x
Change notes x x x x x x x x x x x x x x x x x x
Change parameters (Level 1) x x x x x x x x x x x x
Change parameters (Level 2) x x x x x x x x x x x
Change parameters (Level 3) x x x x x x x x x x
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x 1)
x1)
Change the system configuration x x x x x x x
Close Loop x x x x x x x x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Compare Project Versions x x x x x x x x

Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x x x x
Create Project version x x x x x x
Define and change user rights x x x x
Delete archived reports x x x x x x x x x x x x x x x x x x x
Edit Report Archive x x x x x x x x x x x x x x x x x x x
Edit report definitions x x x x x x x x x x x x x x x
Edit reports x x x x x x x x x x x x x x x x x x x x
Edit Report Types x x x x x x x x x
Force Ports x x x x x x x x x x x x x
Maintenance x x x x x x x x x x
Manual scheduling x x1)
Manual Track x x x x x x x x x x x x x x x x x x
Open Reports x x x x x x x x x x x x x x x x x x x x
Operate x x x x x x x x x x x x x x x x x x
Printer administration x x x x
Project administration x x x x
Read diagnostic data x x x x x x x x x x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x x x x x x x x x
Select auto acknowledgment x
Set the workbench to engineering mode x x x x x x x x x x
Set the workbench to operating mode x x x x x x x x x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x x x
Single Step x x x x x x x x x x x
Storage on removable media (DVDs) x x x x x x x x
Suppress alarms for display
Suppress alarms for display and archive
System logging x x x x
System upgrade x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3) x3) x3) x3)
Test Prototypes (Instantiate not released prototypes) x
Temporary Supervisor login x x x x x x x x x x x x x x
Temporary Threshold x meaning of right is currently unknown meaning of right is currently unknown
View alarms x x x x x x x x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 1) x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 2) x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 3) x x x x x x x x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
contains higher ranking rights over equipment protection (may affect personal and equipment safety)
Impact of Access Right onto Process Control/Engineering data:
Medium Impact: engineering data/designed process control can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data

Unrestricted SPPA-T3000 ACCESS RIGHTS 5 of 35 522468834.xls

 Administrator rights: Only valid für System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role
has to be assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.

Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted SPPA-T3000 ACCESS RIGHTS 6 of 35 522468834.xls

Table of Access Rights SPPA-T3000 before PAC after PAC
User-Roles User-Roles
valid for SW release(s): 04.28.01, 04.29.02, 04.31.01, Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
04.32.01, 04.34.00, 04.35.01 Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
FUNCTIO
experienced perienced
NAL
Access Title RIGHT 4)
Acknowledge alarms x x x x x x x x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x x x x x x x x
Activate and deactivate changes x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x x x x x x x x
Archive administration x x x x
Automatic / manual selection x x x x x x x x x x x x x x x x x x
Change Call Home configuration x x x x
Change notes x x x x x x x x x x x x x x x x x x
Change parameters (Level 1) x x x x x x x x x x x x
Change parameters (Level 2) x x x x x x x x x x x
Change parameters (Level 3) x x x x x x x x x x
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x x x x
Close Loop x x x x x x x x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Compare Project Versions x x x x x x x x

Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x x x x
Create Project version x x x x x x
Define and change user rights x x x x
Delete archived reports x x x x x x x x x x x x x x x x x x x
Edit Report Archive x x x x x x x x x x x x x x x x x x x
Edit report definitions x x x x x x x x x x x x x x x
Edit reports x x x x x x x x x x x x x x x x x x x x
Edit Report Types x x x x x x x x x
Force Ports x x x x x x x x x x x x x
Maintenance x x x x x x x x x x
Manual scheduling x x1)
Manual Track x x x x x x x x x x x x x x x x x x
Open Reports x x x x x x x x x x x x x x x x x x x x
Operate x x x x x x x x x x x x x x x x x x
Printer administration x x x x
Project administration x x x x
Read diagnostic data x x x x x x x x x x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x x x x x x x x x
Select auto acknowledgment x
Set the workbench to engineering mode x x x x x x x x x x
Set the workbench to operating mode x x x x x x x x x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x x x
Single Step x x x x x x x x x x x
Storage on removable media (DVDs) x x x x x x x x
Suppress alarms for display
Suppress alarms for display and archive
System logging x x x x
System upgrade x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3) x3) x3) x3)
Temporary Supervisor login x x x x x x x x x x x x x x
Temporary Threshold x meaning of right is currently unknown meaning of right is currently unknown
Test Prototypes (Instantiate not released prototypes) x
View alarms x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 1) x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 2) x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 3) x x x x x x x x x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
contains higher ranking rights over equipment protection (may affect personal and equipment safety)
Impact of Access Right onto Process Control/Engineering data:

Unrestricted
 Impact of Access Right onto Process Control/Engineering data:
Medium Impact: engineering data/designed process control can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid für System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role
has to be assigned to the us

Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted
Table of Access Rights SPPA-T3000 before PAC after PAC
User-Roles User-Roles
valid for SW release(s): 06.11.02 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
NAL Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
experienced perienced
Access Title RIGHT 4)
Acknowledge alarms x x x x x x x x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x x x x x x x x
Activate and deactivate changes x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x x x x x x x x
Administrate TDY x x x x
Analog Value Comparison x x x x x x x x x x x x x x x x x x x
Archive administration x x x x
Automatic / manual selection x x x x x x x x x x x x x x x x x x
Binary Value Comparison x x x x x x x x x x x x x x x x x x x
Change Call Home configuration x x x x
Change notes x x x x x x x x x x x x x x x x x x
Change parameters (Level 1) x x x x x x x x x x x x
Change parameters (Level 2) x x x x x x x x x x x
Change parameters (Level 3) x x x x x x x x x x
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x x x x
Close Loop x x x x x x x x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Compare Project Versions x x x x x x x x

Configure Video Layout x not available ? not available
Control Camera x not available ? not available
Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1)
x 1)

Create and change plant displays x x x x x x x x x

Create and Save Plant Logbook Entries x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Create Project version x x x x x x
Customize Workbench Layout x x x x
Define and change user rights x x x x
Delete archived reports x x x x x x x x x x x x x x x x x x x
Display Plant Situation Management in operation mode x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Display Video Player x not available ? not available
Display Video Viewer x not available ? not available
Edit Report Archive x x x x x x x x x x x x x x x x x x x
Edit report definitions x x x x x x x x x x x x x x x
Edit reports x x x x x x x x x x x x x x x x x x x x
Edit Report Types x x x x x x x x x
Force Ports x x x x x x x x x x x x x
Maintenance x x x x x x x x x x
Manage Plant Situation Management in operation mode x x5) x5) x5) x5) x5)
Manual scheduling x x1)
Manual Track x x x x x x x x x x x x x x x x x x
Open Reports x x x x x x x x x x x x x x x x x x x x
Operate x x x x x x x x x x x x x x x x x x
Printer administration x x x x
Project administration x x x x
Read diagnostic data x x x x x x x x x x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x x x x x x x x x
Read Plant Logbook x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Select auto acknowledgment x
Send Messages x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Set the workbench to engineering mode x x x x x x x x x x
Set the workbench to operating mode x x x x x x x x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x x x
Single Step x x x x x x x x x x x
Spreadsheet Engineering Connections x x x x x
Storage on removable media (DVDs) x x x x x x x x
Suppress alarms for display
Suppress alarms for display and archive
System logging x x x x
System upgrade x x x x
Tag Out x3) x3)
x 3)
x 3)
x 3)
x 3)
x 3)
x 3)
x3) x3) x3)
Temporary Supervisor login x x x x x x x x x x x x x x

Unrestricted
Temporary Threshold x x x x x x x x x x x x x x x x x x x
Test Prototypes (Instantiate not released prototypes) x
View alarms x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 1) x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 2) x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 3) x x x x x x x x x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
contains higher ranking rights over equipment protection (may affect personal and equipment safety)
Impact of Access Right onto Process Control/Engineering data:
Medium Impact: engineering data/designed process control can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid for T3000 System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.
x5) only available in the Workbench after release in "Admistration Console" (Manage Features) by T3000 System Administrator (Plant Situation Management: to use this functionality an additional engineering is necessary)

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role
has to be assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.

Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted
Table of Access Rights SPPA-T3000 before PAC after PAC
User-Roles User-Roles
valid for SW release(s): 07.00.12.01, 07.00.12.02 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client Client Client Siemens Client Client Client Client shift Client read
Deviatio FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
ns NAL Eng. Eng. Eng., very Eng. very ex- only engineer Eng. Eng.
experienced perienced
Access Title RIGHT 4)
Acknowledge alarms x x x x x x x x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x x x x x x x x
Activate and deactivate changes x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x x x x x x x x
Administrate TDY x x x x
Analog Value Comparison x x x x x x x x x x x x x x x x x x x
Archive administration x x x x
Automatic / manual selection x x x x x x x x x x x x x x x x x x
Binary Value Comparison x x x x x x x x x x x x x x x x x x x
Change ART-E Descriptions new x x
Change Call Home configuration x x x x
Change notes x x x x x x x x x x x x x x x x x x
Change parameters (Level 1) x x x x x x x x x x x x
Change parameters (Level 2) x x x x x x x x x x x
Change parameters (Level 3) x x x x x x x x x x
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x x x x
Close Loop x x x x x x x x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Compare Project Versions x x x x x x x x

Configure Video Layout x x x
Control Camera x x x
Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x x x x
Create and change group displays new x x x x x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x x x x
Create and change user/role specific plant displays new x x x x x x x x x x x x x x x x x x x
Create and Save Plant Logbook Entries x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Create Project version x x x x x x
Customize Workbench Layout x x x x
Define and change user rights x x x x
Define Export Procedure Indicator new x not available not available
Delete archived reports x x x x x x x x x x x x x x x x x x x
Disable alarm sounds new x x
Display Plant Situation Management in operation mode x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Display Video Player x x x
Display Video Viewer x x x
Edit Report Archive x x x x x x x x x x x x x x x x x x x
Edit reports x x x x x x x x x x x x x x x x x x x x
Edit Report Types x x x x x x x x x
editsheetlayouts new x usage unclear? usage unclear?
Force Ports x x x x x x x x x x x x x
Link Engineering Objects with Rules new x not available / usage unclear? not available / usage unclear?
Maintenance x x x x x x x x x x
Manage Plant Situation Management in operation mode x x5) x5) x5) x5) x5)
Manual scheduling x x1)
Manual Track x x x x x x x x x x x x x x x x x x
Navigate to Comos (editing) new
Navigate to Comos (viewing) new
Open Comos (editing) new
Open Comos (viewing) new
Open Reports x x x x x x x x x x x x x x x x x x x x
Operate x x x x x x x x x x x x x x x x x x
Printer administration x x x x
Project administration x x x x
Read diagnostic data x x x x x x x x x x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x x x x x x x x x
Read Plant Logbook x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Remote Diagnostic new x x x
Select auto acknowledgment x
Send Messages x x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5) x5)
Set the workbench to engineering mode x x x x x x x x x x
Set the workbench to operating mode x x x x x x x x x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x x x

Unrestricted
Single Step x x x x x x x x x x x
Spreadsheet Engineering Connections x x x x x
Storage on removable media (DVDs) x x x x x x x x
Store Alarms new usage unclear? usage unclear?
Suppress alarms for display
Suppress alarms for display and archive
System logging x x x x
System upgrade x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3) x3) x3) x3)
Temporary Supervisor login x x x x x x x x x x x x x x
Temporary Threshold x x x x x x x x x x x x x x x x x x x
Test Prototypes (Instantiate not released prototypes) x
User specific customization new x x x
View alarms x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 1) x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 2) x x x x x x x x x x x x x x x x x x x x x
View alarm Types (level 3) x x x x x x x x x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
contains higher ranking rights over equipment protection (may affect personal and equipment safety)
Impact of Access Right onto Process Control/Engineering data:
Medium Impact: engineering data/designed process control can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid for T3000 System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.
x5) only available in the Workbench after release in "Admistration Console" (Manage Features) by T3000 System Administrator (Plant Situation Management: to use this functionality an additional engineering is necessary)

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role has to be
assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.

Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted
Table of Access Rights SPPA-T3000

valid for SW release(s): 07.1.09.0x, 07.1.11.04

Deviatio FUNCTIO
ns NAL
Access Title RIGHT 4)

Acknowledge alarms
Acknowledge alarms globally on plant display
Activate and deactivate changes
Adjust setpoints
Administrate TDY x
Analog Value Comparison x
Archive administration x
Automatic / manual selection
Binary Value Comparison x
Caution Tag Out new x
Change ART-E Descriptions x
Change Call Home configuration x
Change notes
Change parameters (Level 1)
Change parameters (Level 2)
Change parameters (Level 3)
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x
Change the plant hierarchy
Change the system configuration
Close Loop
Commissioning
Compare Project Versions x
Configure Video Layout x
Control Camera del x
Create and change automation functions, prototypes…. x

Create and change function diagrams

Create and change group displays
Create and change libraries x
Create and change macros, compound components x
Create and change plant displays
Create and change user/role specific plant displays x
Create and Save Plant Logbook Entries x
Create Project version x
Customize Workbench Layout x
Define and change user rights x
Define Export Procedure Indicator x
Delete archived reports x
Danger Tag Out new x
Disable alarm sounds x
Display Plant Situation Management in operation mode x
Display Video Player del x
Display Video Viewer x
Edit Alarm Suppression Group new

Unrestricted
Edit Report Archive x
Edit reports
Edit Report Types x
Edit Sheet Layouts x
Force Ports
Link Engineering Objects with Rules x
Maintenance
Manage Plant Situation Management in operation mode x

Manual scheduling x
Manual Track
Navigate to Comos (editing)
Navigate to Comos (viewing)
On Test new x
Open Comos (editing)
Open Comos (viewing)
Open Reports
Operate
Operate Operating Mode Sheets new x
Padlock new x
Printer administration x
Project administration x
Read diagnostic data x
Read function diagrams
Read plant displays
Read Plant Logbook x
Remote Diagnostic x
Select auto acknowledgment x
Send Messages x
Set the workbench to engineering mode x
Set the workbench to operating mode x
Silence alarm sound on all machines x
Single Step
Spreadsheet Engineering Connections x
Storage on removable media (DVDs) x
Store Alarms
Suppress alarms for display
Suppress alarms for display and archive
System logging x
System upgrade x
Tag Out
Temporary Supervisor login x
Temporary Threshold x
Test Prototypes (Instantiate not released prototypes) x
User specific customization x
View alarms
View alarm Types (level 1) x
View alarm Types (level 2) x
View alarm Types (level 3) x
View Lifetime calculation x
View TDY x

Legend:

Unrestricted
Colorcode:
Heavy
impact:
Impact of Access Right onto Process Control/Engineering data: Basic
Medium
data and
Impact:
None or
settings
engineeri
Minor
Administrator rights: can be
Only valid
ng
Impact:
changed,
for T3000
data/desi
Operation
x Activate right only as long as required.
1) designed
System
gned
/Monitorin
process
Administr
process
x2) If the access right "commissioning" is set this has to be documented by a Simulation
g
control
ation
Action, meaning it applies implementing procedure E07-044. control
according
x Usage only allowed in conjunction with Site Commissioning Instruction and only
3) canfor
be
can
to be
design,
isolated aggregates impacted,
x4) The user's modified
access rights for non functional rights can be restricted system-wise.
no See
explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the
change of
x 5)
only available
SPPA-T3000 in the Workbench after release in "Admistration Console" (Manage
system.
Features) by T3000 System Administrator (Plant Situation Management: to use this design
contains
functionality an additional engineering is necessary) data
higher
Changing rights: ranking
Whenever any right is to be changed a new role has to be defined. For doing thatrights copy an
over
existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change
the right(s) in this newly created role. That role has to be assigned to the user(s) equipmen
whose
right(s) shall be changed. Please leave the above defined user-roles for reference t
Abbreviations:
purposes as they are. protection
Comm. = Commissioning (may
Eng. = Engineer affect
personal
and
equipmen
t safety)

Unrestricted
 after PAC
User-Roles
Client Client Siemens Client Client Client Client shift
Admin I&C-Eng. Warranty Electrical Mechanical shift leader
engineer Eng. Eng.

x x x x x x x
x x x x x x x
x x x
x x x x x x x
x
x x x x x x x
x
x x x x x x x
x x x x x x x
not available / usage unclear?

x
x x x x x x x
x x x
x x x
x x x

x x x
x x x x x x x

x x x
x
x

x x x
x x x x

x x x
x x x x x x x
x5) x5) x5) x5) x5) x5) x5)
x x x
x
x
ART-E / only for engineering
x x x x x x x
not available / usage unclear?

x5) x5) x5) x5) x5) x5) x5)

x
x

Unrestricted
 x x x x x x x
x x x x x x x
x x x
usage unclear?
x x x x
ART-E / only for engineering
x x x x x
x5) x5)

x x x x x x x
not used
not used
not available / usage unclear?

x x x x x x x
x x x x x x x
usage unclear?
not available / usage unclear?
x
x
x x x x x x x
x x x x x x x
x x x x x x x
x5) x5) x5) x5) x5) x5) x5)
x

x5) x5) x5) x5) x5) x5) x5)

x x x
x x x x x x x
x x
x x x
x
x x x x x

x
x
x3) x3) x3)
x x x x x x
x x x x x x x

x
x x x x x x x
x x x x x x x
x x x x x x x
x x x x x x x
x x x x x x x
x x x x x x x

Unrestricted
Client read
only

x5)

Unrestricted
 x

x
x
x

x5)

x
x
x
x
x
x

Unrestricted
Table of Access Rights SPPA-T3000 before PAC
User-Roles
valid for SW release(s): 07.2.10.04 Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client
Deviatio FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read
ns NAL Eng. Eng. Eng., very Eng. very ex- only
RIGHT 4) experienced perienced
Access Title
Basic
Open Reports x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x
System logging x x x
Administration
Archive administration x x x
Change Call Home configuration x x x
Customize Workbench Layout x x x
Define and change user rights x x x
Printer administration x x x
Project administration x x x
Storage on removable media (DVDs) x x x
System upgrade x x x
Temporary Supervisor login x x x x x x x x
User specific customization x x
Engineering View
Activate and deactivate changes x x x x x x x
Change parameters (Level 1) x x x x x x x x x
Change parameters (Level 2) x x x x x x x x
Change parameters (Level 3) x x x x x x x
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x
Compare Project Versions x x x x x
Create Project version x x x
Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x
Create and change group displays x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x
Edit Alarm Suppression Group new
Manual scheduling x x1)
Set the workbench to engineering mode x x x x x x x
Spreadsheet Engineering Connections x x x x
Test Prototypes (Instantiate not released prototypes) x
Operating View
Acknowledge alarms x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x
Administrate TDY x x x
Analog Value Comparison x x x x x x x x x x x x
Automatic / manual selection x x x x x x x x x x x
Binary Value Comparison x x x x x x x x x x x x

Unrestricted
Change notes x x x x x x x x x x x
Close Loop x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Create and change user/role specific plant displays x x x x x x x x x x x x

Disable alarm sounds x x
Force Ports x x x x x x x x x
Maintenance x x x x x
Manual Track x x x x x x x x x x x
Operate x x x x x x x x x x x
Remote Diagnostic x x
Set the workbench to operating mode x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x
Single Step x x x x x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3)
Temporary Threshold x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x
Report System
Delete archived reports x x x x x x x x x x x x
Edit Report Archive x x x x x x x x x x x x
Edit Report Types x x x x x x
Edit reports x x x x x x x x x x x x
Alarm Sequence Display
Select auto acknowledgment x
Store Alarms
Suppress alarms for display
Suppress alarms for display and archive
View alarm Types (level 1) x x x x x x x x x x x x x
View alarm Types (level 2) x x x x x x x x x x x x x
View alarm Types (level 3) x x x x x x x x x x x x x
View alarms x x x x x x x x x x x x
Diagnostic View
Read diagnostic data x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
Impact of Access Right onto Process Control/Engineering data: Medium Impact:contains higher data/designed
engineering ranking rights over equipment
process control protection (may affect personal and equipment safety)
can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid for T3000 System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.
x5) only available in the Workbench after release in "Admistration Console" (Manage Features) by T3000 System Administrator (Plant Situation Management: to use this functionality an additional engineering is necessary)

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role has to be
assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.
Abbreviations:
Comm. = Commissioning
Eng. = Engineer

Unrestricted
 after PAC
User-Roles
Client Client Siemens Client Client Client Client shift Client read
Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
engineer Eng. Eng.

x x x x x x x x
x x x x x x x x
x x x x x x x x
x

x
x
x
x
x
x
x x x x x
x
x x x x x x
x

x x x
x x x
x x x
x x x

x x x
x x x
x x x

x x x
x x x x

x x x

x x x
x

x x x x x x x
x x x x x x x
x x x x x x x
x
x x x x x x x
x x x x x x x
x x x x x x x

Unrestricted
 x x x x x x x
x x x x x x x

x x x x x x x

x x x x
x x x x x
x x x x x x x
x x x x x x x
x
x x x x x x x x
x x
x x x
x3) x3) x3)
x x x x x x x
x x x x x x x x
x x x x x x x x

x x x x x x x
x x x x x x x
x x x
x x x x x x x x

x x x x x x x x
x x x x x x x x
x x x x x x x x
x x x x x x x x

x x x x x x x x

Unrestricted
Table of Access Rights SPPA-T3000 before PAC
User-Roles
valid for SW release(s): 07.2.11.xx Admin (A) Comm. I&C-Eng. I&C I&C Electrical Mechanical/ Mechanical/ Siemens Siemens Client Client
Deviatio FUNCTIO Admin (B) Trainee governor comm. Chemical Chemical Shift, Shift shift read
ns NAL Eng. Eng. Eng., very Eng. very ex- only
RIGHT 4) experienced perienced
Access Title
Basic
Open Reports x x x x x x x x x x x x
Read function diagrams x x x x x x x x x x x x
Read plant displays x x x x x x x x x x x x
System logging x x x
Administration
Archive administration x x x
Change Call Home configuration x x x
Customize Workbench Layout x x x
Define and change user rights x x x
Printer administration x x x
Project administration x x x
Storage on removable media (DVDs) x x x
System upgrade x x x
Temporary Supervisor login x x x x x x x x
User specific customization x x
Engineering View
Activate and deactivate changes x x x x x x x
Change parameters (Level 1) x x x x x x x x x
Change parameters (Level 2) x x x x x x x x
Change parameters (Level 3) x x x x x x x
Change the graphic of function diagrams (x/y coordinates, free
grafic)
Change the plant display hierarchy x x1) x1)
Change the plant hierarchy x1) x1)
Change the system configuration x x x x
Compare Project Versions x x x x x
Create Project version x x x
Create and change automation functions, prototypes…. x x1) x1)
Create and change function diagrams x x x x
Create and change group displays x x x x x
Create and change libraries x x1) x1)
Create and change macros, compound components x x1) x1)
Create and change plant displays x x x x x x
Edit Alarm Suppression Group new
Manual scheduling x x1)
Set the workbench to engineering mode x x x x x x x
Spreadsheet Engineering Connections x x x x
Test Prototypes (Instantiate not released prototypes) x
Commissioning
Peform loop checks new
Operating View
Acknowledge alarms x x x x x x x x x x x
Acknowledge alarms globally on plant display x x x x x x x x x x x
Adjust setpoints x x x x x x x x x x x
Administrate TDY x x x
Analog Value Comparison x x x x x x x x x x x x

Unrestricted
Automatic / manual selection x x x x x x x x x x x
Binary Value Comparison x x x x x x x x x x x x
Change notes x x x x x x x x x x x
Close Loop x x x x x x x x x x x
Commissioning 2) 2) 2) 2) 2)

Create and change user/role specific plant displays x x x x x x x x x x x x

Disable alarm sounds x x
Force Ports x x x x x x x x x
Maintenance x x x x x
Manual Track x x x x x x x x x x x
Operate x x x x x x x x x x x
Remote Diagnostic x x
Set the workbench to operating mode x x x x x x x x x x x x x
Silence alarm sound on all machines x x x x x x
Single Step x x x x x x x x
Tag Out x3) x3) x3) x3) x3) x3) x3) x3)
Temporary Threshold x x x x x x x x x x x x
View TDY x x x x x x x x x x x x x
View Lifetime calculation x x x x x x x x x x x x x
Report System
Delete archived reports x x x x x x x x x x x x
Edit Report Archive x x x x x x x x x x x x
Edit Report Types x x x x x x
Edit reports x x x x x x x x x x x x
Alarm Sequence Display
Select auto acknowledgment x
Store Alarms
Suppress alarms for display
Suppress alarms for display and archive
View alarm Types (level 1) x x x x x x x x x x x x x
View alarm Types (level 2) x x x x x x x x x x x x x
View alarm Types (level 3) x x x x x x x x x x x x x
View alarms x x x x x x x x x x x x
Diagnostic View
Read diagnostic data x x x x x x x x x x x x x

Legend:
Colorcode:
Heavy impact: Basic data and settings can be changed, designed process control can be impacted,
Impact of Access Right onto Process Control/Engineering data: Medium Impact:contains higher data/designed
engineering ranking rights over equipment
process control protection (may affect personal and equipment safety)
can be modified
None or Minor Impact: Operation/Monitoring according to design, no change of design data
Administrator rights: Only valid for T3000 System Administration

x1) Activate right only as long as required.

x2) If the access right "commissioning" is set this has to be documented by a Simulation Action, meaning it applies implementing procedure E07-044.
x3) Usage only allowed in conjunction with Site Commissioning Instruction and only for isolated aggregates
x4) The user's access rights for non functional rights can be restricted system-wise. See explanation in Excel worksheet "Explaining_Functional_Rights" or in the online help of the SPPA-T3000 system.
x5) only available in the Workbench after release in "Admistration Console" (Manage Features) by T3000 System Administrator (Plant Situation Management: to use this functionality an additional engineering is necessary)

Changing rights:
Whenever any right is to be changed a new role has to be defined. For doing that copy an existing role e.g. "Siemens_Shift" into an new role e.g. "Siemens_Shift_01" and change the right(s) in this newly created role. That role has to be
assigned to the user(s) whose right(s) shall be changed. Please leave the above defined user-roles for reference purposes as they are.
Abbreviations:

Unrestricted
Comm. = Commissioning
Eng. = Engineer

Unrestricted
 after PAC
User-Roles
Client Client Siemens Client Client Client Client shift Client read
Admin I&C-Eng. Warranty Electrical Mechanical shift leader only
engineer Eng. Eng.

x x x x x x x x
x x x x x x x x
x x x x x x x x
x

x
x
x
x
x
x
x x x x x
x
x x x x x x
x

x x x
x x x
x x x
x x x

x x x
x x x
x x x

x x x
x x x x

x x x

x x x
x

x x x x x x x
x x x x x x x
x x x x x x x
x
x x x x x x x

Unrestricted
 x x x x x x x
x x x x x x x
x x x x x x x
x x x x x x x

x x x x x x x

x x x x
x x x x x
x x x x x x x
x x x x x x x
x
x x x x x x x x
x x
x x x
x3) x3) x3)
x x x x x x x
x x x x x x x x
x x x x x x x x

x x x x x x x
x x x x x x x
x x x
x x x x x x x x

x x x x x x x x
x x x x x x x x
x x x x x x x x
x x x x x x x x

x x x x x x x x

Unrestricted
Explanation of Access Rights
Access rights for a given login session are determined by a logical combination of the User rights and the Operator Working Place rights (using a logical
AND). Access rights for both Users and OWPs are set using the Access Rights dialog.

Applicability of Access Rights

The applicability of access rights must be distinguished between
-not-node-selective access rights and
-node-selective access rights

1. The not-node selective access rights are valid for actions which are not related to a specific node in the Project Hierarchy. The role for not-node
selective access rights is modified in the field Functional Rights. Examples of not-node selective rights are:
-administration rights,
-creating and changing Automation Functions Blocks,
-activation of the Operation Mode for the Workbench .

2. The node selective access rights are restricted to a certain node or Plant Area. These rights are related to operation and engineering actions like
-reviewing function diagrams
-creating and changing function diagrams
-operation
-simulation or forcing of signals

Unrestricted
User Roles SPPA-T3000 E F ES EC64

Table of Access Rights SPPA-T3000

The tables below give an explanation of the access rights:
Access Title Description of Access Right Used in View Node
Selective
System administration System administration None No
System upgrade update/upgrade to new Software Releases. Upgrade View No
(online or offline)
Project administration Project administration Diagnostic View: No
Button start/stop in status information of containers enabled/disabled
according to permission.
Diagram Editor:
Tools -> Graph Layout -> Parameters
Workbench:
Multi Unit -> Attach Unit
Multi Unit -> Detach Unit
Multi Unit -> Show Unit Information
Project View:
Admin -> Runtime Container -> Start
Admin -> Runtime Container -> Stop
Admin -> Runtime Container -> Create
Admin -> Runtime Container -> Create S7 Runtime container

Admin -> Runtime Container -> Edit

Printer administration Page setup for printing, and starting or
stopping alarm printers.
Archive administration Archive administration
Storage on removable media (DVDs) Manual burning of DVDs
Define and change user rights (Change Define and change user specific access
login rights) rights.
Change Call Home Configuration Change and configuration of the call home
function.
Supervisor Login Allows the user to log in a temporary
supervisor
Admin -> Runtime Container -> Delete
Admin -> Runtime Container -> Reconnect Runtime
Container
Admin -> Runtime Container -> Disconnect Runtime
Container
Admin -> Runtime Container -> Load S7 Execution Frame
Extras -> Project Settings -> Colors
Extras -> Project Settings -> Styles
Extras -> Project Settings -> Sounds
Extras -> Project Settings -> Document Types
Extras -> Project Settings -> Inheritance Rules
Extras -> Import -> Audio Clip
Extras -> Import -> Image
Extras -> Import -> Application Profile
Extras -> Import -> GSD File
Admin -> Localized Texts -> Import
Admin -> Localized Texts -> Export
Extras -> Delete -> Sound File
Extras -> Delete -> Image
Extras -> Delete -> GSD File
Extras-> Plant Manual ->Export
Extras-> Plant Manual ->Import
Extas-> Plant Manual ->Generate
Extras -> Assign Application Profile to RTC
Extras -> Calculate System Resources
Admin -> Alarm Types
Admin -> Commit All
Admin -> Rollback All
Admin -> Engineering Logs
Edit -> S7 -> Start S7 Station
Edit -> S7 -> Stop S7 Station
Edit -> S7 -> List S7 Block Versions
Edit -> Copy and Modify -> Copy and Modify -> Change
Rules -> Copy and Modify Rules dialog box, the Save Project
Rules button is enabled
Diagram Editor : Page Setup Dialog: No
Printer setup fields are enabled or disabled according to permissions
(affects all diagrams in the project).
Project View :
Admin -> Alarm Printer -> Start Printing
Admin -> Alarm Printer -> Stop Printing
Alarm Printer
Project View : No
Extras -> Export -> Archive Data
Project View: No
In the Swap out Archive Data dialog box, the Burn DVD check
box is enabled
Project View : No
Admin -> User Manager
Admin -> User Roles
Admin ->Working Place Manager
Project View : No
Admin -> Call Home -> Call Home Configurator
Admin -> Call Home -> Call Home Group Manager
The dialog for temporary supervisor login only lists users who have this No
permission.

Unrestricted SPPA-T3000 Rel. 04.07.01 30 of 35

User Roles SPPA-T3000 E F ES EC64

Access Title Description of Access Right Used in View Node

Set the workbench to engineering
mode
Create and change automation
functions, prototypes, faceplates
Create & change macros, compound
components
Create and change libraries
Selective
Selection of the configuration mode in the Workbench: No
workbench Configuration Mode
Allows the construction or change of the Workbench: No
following types: AFIs, HPs, Faceplates, Applications -> Prototype Editor
Connection between AFIs and faceplates
Project View :
Extras -> Import -> Prototypes
Extras -> Export -> Prototypes
Extras -> Replace Prototype
Allows the construction or change of macros Project View: No
and compound components
Project -> New -> Macro
If Macro or CC selected:
Project -> Commit
Project -> Rollback
Project -> Delete
Project -> Rename
Edit -> Title Block
Edit -> Open in Configuration Mode
Extras -> Import -> Macro(s)
Extras -> Export -> Macro(s)
Extras -> Convert Compound Component to Macro
Extras -> Convert Macro to Compound Component
Diagram Editor :
Edit -> Macro / Compound Component ->
Macro from selection
Macro from diagram
Compound Component from diagram
Convert Compound Component to Macro
If Macro or CC selected:
Edit -> Commit
Edit -> Rollback
Selection of different types (Automation Project View No
Functions, Hardware Proxies, faceplates) Project -> New -> Library Node
from a specific project
If Library Node selected:
Project -> Delete
Project -> Rename
Extras -> Copy and Modify (Library Node , Macro or CC selected)

Extras -> Import -> Automation Function

Test Prototypes (Instantiate not
released Prototypes)
Read function diagrams
Change Call Home Configuration
Create and change function diagrams Construction and change of Function
Diagrams
Instantiate unreleased prototypes
Opening of Function Diagrams in either
operation or configuration mode
In configuration mode the Diagram Editor
opens in Read-Only mode if "Create &
Change Function Diagrams" not set.
Changing Call Home Configuration and
Group Manager.
Extras -> Import -> CFC Library(currently hidden menu)
Extras -> Assign Pictogram/Faceplate
Admin ->Runtime container ->Activate Updated Afs
Drag & Drop of library folders, Macros or CCs
Diagram Editor : No
Unreleased prototypes are only shown in the Prototype Editor or for
users with the permission to the test unreleased prototypes.
Project View : Yes
If function diagram selected and menu item:Edit ->
Open in Configuration Mode
Title Block
Copy and Modify
Export of Project Nodes and Diagrams checks, if the user has the
permission to read diagrams in the selected folder.
Operating View:
Faceplate Button Open IC-Diagram
Project View : No
Admin -> Call Home -> Call Home Configurator
Admin -> Call Home -> Call Home Group Manager
Project View : Yes
Project -> New -> Function Diagram
If function diagram selected:
Project -> Delete
Project -> Rename
Edit -> Open in Configuration Mode
Edit -> Title Block
Edit -> Diagram Assignment
Edit -> Commit
Edit -> Rollback
Edit -> Set Cycle Time
Edit -> Copy & Modify (A Project Node may also be selected)
Extras -> Documentation -> Uncommitted Changes
Extras -> Documentation -> Unactivated Changes
Extras -> Import -> Spreadsheet Data
Extras -> Spreadsheet Engineering -> Diagram Properties (if
project node for function diagram selected)

Unrestricted SPPA-T3000 Rel. 04.07.01 31 of 35

User Roles SPPA-T3000
Access Title
Change the graphic of function
diagrams (x/y-coordinates, free
graphic)
Create and change plant displays
Change the plant hierarchy
Change the plant display hierarchy
Unrestricted SPPA-T3000 Rel. 04.07.01
Description of Access Right
Changing free graphics and moving objects in Project View :
Function Diagrams
Construction and change of Plant Displays
Construction and change of the plant
hierarchy
Construction and change of the Plant
Display hierarchy
E F ES EC64
Used in View Node
Selective
Extras -> Spreadsheet Engineering -> AF Properties (if project
node for function diagram selected)
Extras -> Spreadsheet Engineering -> Parameters (if project
node for function diagram selected)
Extras -> Spreadsheet Engineering -> Parameter Values (if
project node for function diagram selected)
Extras -> Spreadsheet Engineering -> Pictogram Properties
(if project node for function diagram selected)
Import of Project Nodes, diagrams hardware engineering checks, if
the user has the permission to change diagrams in the selected folder.
Synchronization of the IO-List database checks, if the user has the
permission to change diagrams in the selected folder
Replace Compound Component checks, if the user has the
permission to change diagrams in the selected folder
Spreadsheet engineering disables fields belonging to diagrams the user
has no permission to change.
Drag & Drop of function diagrams
Dialog for new Plant Displays: creation of an assigned function
diagram and direct assigning to an existing function diagram check this
permission
Diagram Editor (Read-Only mode):
Edit -> Commit
Edit -> Rollback
Point View:
Read only mode of the engineering sheet
Commit
Rollback
Yes
If function diagram selected and menu item:Edit ->
Open in Configuration Mode
Title Block
Copy and Modify
Edit -> Commit
Edit -> Rollback
Extras -> Documentation -> Uncommitted Changes
Extras -> Find Open Function Diagram Connections
Diagram Editor :
Edit -> Commit
Edit -> Rollback
Project View : Yes
If Plant Display selected:
Project -> Delete
Project -> Rename
Edit -> Open in Configuration mode
Edit -> Title Block
Edit -> Commit (folder or Plant Display selected)
Edit -> Rollback (folder or Plant Display selected)
Edit -> Diagram Assignment
also:
Extras -> Documentation ->Uncommitted Changes
Extras -> Spreadsheet Engineering -> Diagram Properties
(project node or Plant Display selected)
Extras -> Spreadsheet Engineering -> Pictogram Properties
(project node or Plant Display selected)
Import of Project nodes and diagrams checks, if the user has the
permission to change Plant Displays in the selected folder
Drag & Drop of Plant Displays
Dialog for new function diagrams: Creation of an assigned Plant
Display and direct assigning to an existing Plant Display check this
permission
Diagram Editor : Read-Only mode
Edit -> Commit (folder or Plant Display selected)
Edit -> Rollback (folder or Plant Display selected)
Project View : Yes
Project -> New -> Project Node
Project -> Delete (project node selected)
Project -> Rename (project node selected)
Edit -> Title Block (project node selected)
Edit -> Set System Diagram Root
Edit -> Copy and Modify (project node selected)
Import of Project nodes and diagrams hardware engineering checks, if
the user has the permission to change the hierarchy underneath the
selected folder
In the Copy and Modify dialog the Start button is dimmed according to
the users permission to change the hierarchy underneath the
destination folder.
Drag & Drop of project nodes
Plant Display Hierarchy : No
Edit -> Reset Hierarchy
32 of 35
User Roles SPPA-T3000
Change the plant display hierarchy
Access Title
Change the system configuration
Change parameters (Level 1)
Change parameters (Level 2)
Change parameters (Level 3)
Activate and deactivate changes
Create Project Version
Compare Project Versions
Manual Scheduling
Unrestricted SPPA-T3000 Rel. 04.07.01
E F ES EC64
Construction of
Description andAccess of the Plant
changeRight Used in View No
Node
Display hierarchy Selective
Edit -> Delete single Plant Display
Edit -> Delete Plant Display with all underlying Plant
Displays
Move Plant Displays
Drag & Drop new Plant Displays from Project View
The Dialog defining the settings of partial plant display hierarchy root
only allows to change the visibility for the current user, if the the user
doesn't have this permission.
Allows the configuration of the software Project View : Yes
structure, e.g. the assignment of AFIs to a
runtime container
Edit -> Assign Runtime Container
Edit -> Sound Alarm Groups
Edit -> Print Alarm Groups
Spreadsheet engineering of diagrams checks the permission to enable/
disable the changing of the runtime container assignment
Allows the change of parameters (e.g. Diagram Editor : (selected function diagram) Yes
operator changeable limits) Edit parameters in parameter dialog
Operating View:
Force values in force dialog.
Set right to faceplate
Point View:
Edit Parameters
Force Values
Allows the change of parameters (set point Diagram Editor : (selected function diagram) Yes
adjustment, controller tuning) Edit parameters in parameter dialog
Operating View:
Force values in force dialog
Set right to faceplate
Point View:
Edit Parameters
Force Values
Allows the change of parameters (third level Diagram Editor : (selected function diagram) Yes
of protection) Edit parameters in parameter dialog
Operating View:
Force values in force dialog
Set right to faceplate
Point View:
Edit Parameters
Force Values
Activate or deactivate changes in diagrams Project View : Yes
and Plant Displays Edit -> S7 -> S7 Hardware Configuration
Edit -> S7 -> Load S7 Hardware
Edit -> S7 -> Load S7 Connections
Edit -> S7 -> FM458 -> Compile/Download/Start FM458
Edit -> S7 -> FM458 -> Select Master Rack
Edit -> S7 -> Failsafe System -> Compile/Download/Start
Failsafe system
Edit -> S7 -> Failsafe System -> Edit Safety Program
Edit -> S7 -> Failsafe System -> Edit Safety Parameters
Edit -> Preview Activation
Edit -> Activate
Edit -> Deactivate
Edit -> Commit last activation: only, if project container configuration
is not changed to auto commit mode
Edit -> Rollback last activation: only, if project container configuration
is not changed to auto-commit mode
Extras -> Documentation -> Unactivated Changes
Diagram Editor :
Edit -> Preview Activation
Edit -> Activate
Edit -> Deactivate
Point View:
Preview Activation
Commit Last Activation
Rollback Last Activation
Create a project version (copy of the project Project View : No
data)
Versioning -> Create Project Version
Compare the current project with a saved Project View : No
version
Versioning -> Compare Project Version
Manual scheduling related operations (for Diagram Editor : No
Diagrams in Project View and AFIs in Extras -> Manual Scheduling (Either a Function Diagram or a
Editor)
CC is open)
Extras -> Activate Manual Scheduling (A Function Diagram is
open)
Extras -> Open Scheduling Table (Either a Function Diagram or
a CC is open)
Project View :
Edit -> Manual Scheduling -> Activate Diagram Scheduling
33 of 35
Manual Scheduling Manual scheduling related operations (for No
Diagrams in Project View and AFIs in
Editor)

User Roles SPPA-T3000 E F ES EC64

Access Title Description of Access Right Used in View Node

Selective
Edit -> Manual Scheduling -> Activate Internal Diagram
Scheduling
Edit -> Manual Scheduling -> Open Scheduling Table
Set the Workbench to operation mode Selection of the operation mode of the Workbench : No
workbench
Operation mode
Read plant displays Monitoring of Plant Displays. In Project View : Yes
configuration mode the diagram editor opens Edit -> Open in Operation Mode (Plant Display selected)
in Read-only mode when Create &
Change plant displays? is not set. Edit -> Open in Configuration Mode (Plant Display selected)
Edit -> Title Block (Plant Display selected)
Edit -> Copy and Modify (Plant Display selected)
Export of Project nodes and diagrams checks, if the user has the
permission to read diagrams in the selected folder
Operating View:
Open Plant Display
Automatic / manual selection Automatic and manual selection Operating View: Yes
Set right to faceplate
Operate Operation of Automation Functions (e.g. Operating View: Yes
start / stop) Set right to faceplate
Adjust setpoints Adjusting setpoints in Faceplates Operating View: Yes
Set right to faceplate
Single Step Operation of a sub-loop controller when a Operating View: Yes
condition is missing Set right to faceplate
Commissioning Operating the commissioning mode button in Operating View: Yes
a Faceplate Set right to faceplate
Tag Out Operating the tag out mode button in a Operating View: Yes
Faceplate Set right to faceplate
Close Loop Operating the closed loop mode button in a Operating View: Yes
Faceplate Set right to faceplate
Manual Track Operation of Automation Functions to reset Operating View: Yes
fault conditions Set right to faceplate
Maintenance Allows operation of OH_COUNT and Operating View: Yes
SC_COUNT Faceplates Set right to faceplate
Acknowledge alarms Acknowledgment of single alarms, alarm Operating View: Yes
pages and alarm groups Set right to faceplate
Alarm Sequence Display :
Point View: Acknowledge
System logging Configuration and selection of logs. Diagnostic View : No
Register Tab Logging is enabled/disabled according to right.
Remote diagnosis button of containers is en/disabled according to right.

Change notes Allows changes of notes of other users Operating View: Yes
(editing and deleting)
Delete button in Notes Dialog is en/disabled according to right.
Notepad is opened in ReadOnly mode according to right.
Force Ports Changes of Automation Functions input / Project View : Yes
output values by manually input Extras -> Documentation ->Forced ports
Extras ->Import->Forced Ports
Operating View:
Faceplate Button
Force Ports (in Dynamic Function Diagrams)
Point View:
Read only mode of Forcing sheet.
Acknowledgement alarms globally on Acknowledgment of all alarms of a Plant Operating View: Yes
plant displays Display, e.g. during commissioning phase Button: Acknowledge all alarms of plant display
Silence alarm sound on all machines Silence sound alarms on all clients Operating View: No
Button: Silence audible alarm on all machines
Temporary Threshold Create temporary thresholds No
Configuration Trend Display Configure user defined Trend Displays User defined trends can only be placed on user defined plant displays Yes
where there may not be any restrictions for the current user -> Not
implemented
View Lifetime Calculation Open the Fatigue Monitoring System Workbench : No
browser Applications -> Lifetime Calculation
View TDY Allows the opening of the TDY tool Workbench : No
Applications -> TDY
Open Reports Opening of the reports system Workbench : Yes
Applications -> Reports
Project View :
With a Report Definition selected:
Edit -> Open in Operation Mode
Edit -> Copy and Modify (Report Definition or Point Group
selected)
Drag and drop of Point Groups or Report Definitions
Edit report definitions Editing and storing of report definitions Project View : No
Project -> New -> Point Group
Project -> New -> Report Definition
Project -> Delete (point group or report definition selected)
Project -> Rename (point group or report definition selected)
Edit -> Open in Operation Mode (report definition selected)

Unrestricted SPPA-T3000 Rel. 04.07.01 34 of 35

Edit report definitions
User Roles SPPA-T3000
Access Title
Edit reports
Edit Report Archive
Edit Report Types
Select auto acknowledgment
Suppress alarms for display
Suppress alarms for display and
archive
View alarms
Read diagnostic data
Unrestricted SPPA-T3000 Rel. 04.07.01
Editing and storing of report definitions No
E F ES EC64
Description of Access Right Used in View Node
Selective
Edit -> Open in Configuration Mode (point group or report
definition selected)
Edit -> Title Block (point group or report definition selected)
Edit -> Commit (point group or report definition selected)
Edit -> Rollback (point group or report definition selected)
Edit -> Copy and Modify (point group or report definition selected)
Extras -> Documentation -> Uncommitted Changes
Import of Project nodes and diagrams checks, if the user has the
permission to edit reports in the selected folder
Drag & Drop of point groups or report definitions
Editing and storing of reports queries Report View Yes
Edit Report Archive Report View No
Edit Report Types Project View : Yes
Extras -> Import -> Report Type
Extras -> Export -> Report Type
Extras -> Delete -> Report Type
Report View
Switch on/off of auto alarm acknowledgement Alarm Sequence Display No
function
Suppression of alarms. The suppressed Operating View Yes
alarms are no longer shown in the alarm Point View: Suppress Display
sequence display
Alarm Sequence Display
Suppression of alarms or other Automation Operating View Yes
Functions outputs. The suppressed signals Point View: Suppress
are no longer archived or shown in the alarm
sequence display Alarm Sequence Display
View alarms within the alarm sequence Alarm Sequence Display Yes
display Selection of displayed alarms
Workbench :
Applications -> Alarm Sequence Display -> Default ASD
Applications -> Alarm Sequence Display -> New Alarm
Sequence Display
Applications -> Alarm Sequence Display -> Delete Alarm
Sequence Display
Operating View:
Faceplate button for CRASD (see 4.1.6)
Context menu item for CRASD in dynamic function diagram
Context menu item for CRASD in dynamic plant display(see 4.1.6)
Access to all diagnostic data: Detail diagnosis Workbench : No
is allowed wherever the user had the
Applications -> Diagnostic View
permission to open the Alarm Sequence
display, faceplate or point view containing a
button to open the detail diagnosis
35 of 35