Read permission restriction on OPC UA Server

[JulenGTK]

Hi,

I have set an OPC UA Server through the WinCC OA Manager and I am serving some datapoints through the DPGroup "OPCUARead".
I have already configured a couple users to access the data, and my problem is that both users can access all datapoints in the group, with no restrictions.
I would like to restrict the datapoints that users can see when loging in through a OPC UA Client, is there a way to do that?

I am using WinCC OA V3.12 and Windows 7.

Thanks in advance.

Kind regards,

Julen

[leoknipp]

For the items in the datapoint group used for the OPC UA server you cannot define permissions for every connected OPC UA client.
If you want to have different items for several OPC UA clients you can start several OPC UA server which are using different datapoint groups which contain only these items which shall be accessible.

Best Regards
Leopold Knipp
Senior Support Specialist

[JulenGTK]

I have tried starting another manager with an OPC UA server within the same project, but I don't know where should I put the datapoints I want to serve in the second server. There is only one "OPCUARead" DPGroup, even when I have both servers running. I have also checked the possible config entries for the OPC UA Server, but I have not found any entry to change the DPGroup used to serve the datapoints. How do I change the DPGroup used by the server?

Thanks for your help.

Kind regards,

Julen

[leoknipp]

Which data shall be provided by a WinCC OA OPC UA server is defined with some config entries, e.g. opcuaAlarmGroup.
For detailed information please have a look at the WinCC OA documentation: Drivers --> OPC Unified Architecture --> OPC UA Server --> Possible config entries.

Best Regards
Leopold Knipp
Senior Support Specialist

[JulenGTK]

I have checked the WinCC OA documentation and the entry you mention (e.g. opcuaReadGroup) doesn't appear on the V3.12. However it appears on the WinCC OA V3.14 documentation. I have tried implementing it in my project (V3.12) and I get the following in the log:
"WCCOAopcuasrv(2), 2018.01.08 16:54:22.170, PARAM,WARNING, 95, Unknown keyword in resource, opcuaReadGroup
WCCOAopcuasrv2:WCCOAopcuasrv(2), 2018.01.08 16:54:22.170: exit(1) called!"
Is there a way of implementing it on the V3.12?

[leoknipp]

The config entries have been implemented in WinCC OA 3.13. In older versions this option is not available.
If you want to use it you have to upgrade to a newer version than WinCC OA 3.12.

Best Regards
Leopold Knipp
Senior Support Specialist

[JulenGTK]

Ok. Thank you very much.

Kind regards,

Julen De la Torre Galán