Controller User Rights
The second step in user rights is to assign what permissions the group has on selected controllers that are accessible in the plant structure  .
.
If a controller is visible, configurations and parameters can be read. Additional designated user rights can be given to the user group.
- Select the System administration icon  in the left menu bar. in the left menu bar.
- Select the User group icon  in the top menu bar. in the top menu bar.- The workspace window shows a table of user groups. 
- Double click on one row in the table to display the menus for editing. 
- Click the desired tab in the Group permissions menu. 
- Set desired user rights for the selected user group. A selected check box  indicates that the feature is active. indicates that the feature is active.- The possible combinations are described in the table. - Changes are automatically saved. 
| Parameter | Description | Condition | 
|---|---|---|
| Same permission on all controllers (new included) | Radio button If marked, the selected user rights are applicable for all visible controllers in the plant structure (new included. | If unmarked: If the plant structure is changed, for example if new controllers are added, it is necessary to update the user rights for the controllers. | 
| Manually set permissions on each controller | Radio button If marked, the selected user rights are applicable only for selected controllers in the plant structure. | |
| Update | Check box  Members of the user group can: 
 | |
| Create & Delete | Check box  Members of the user group Create & Delete have the permissions to: 
 | |
|  | Open the folder and display the content. | |
|  | Close the folder and hide the content. | |
| (X/Y) | X controllers out of totally Y controllers in the marked folder, do have the selected privilege | 

A folder with no marked user rights is invisible to the user group in the plant structure  .
.
The minimum user rights level for a folder is Read. This level makes a folder visible and its content of subfolders and controllers are also visible.
If a controller is visible, its configurations and parameters can at least be read. Additional user rights can be assigned to the user group.