# Controller User Rights

The second step in user rights is to assign what permissions the group has on selected controllers that are accessible in the plant structure .

If a controller is visible, configurations and parameters can be read. Additional designated user rights can be given to the user group.

1. Select the System administration icon in the left menu bar.

2. Select the User group icon in the top menu bar.

   The workspace window shows a table of user groups.

3. Double click on one row in the table to display the menus for editing.

4. Click the desired tab in the Group permissions menu.

5. Set desired user rights for the selected user group. A selected check box indicates that the feature is active.

   The possible combinations are described in the table.

   Changes are automatically saved.

User rights to controllers
Parameter | Description | Condition
--- | --- | ---
Same permission on all controllers (new included) | Radio button If marked, the selected user rights are applicable for all visible controllers in the plant structure (new included. | If unmarked: If the plant structure is changed, for example if new controllers are added, it is necessary to update the user rights for the controllers.
Manually set permissions on each controller | Radio button If marked, the selected user rights are applicable only for selected controllers in the plant structure. |
Update | Check box Members of the user group can: Change controller configurations and settings that already exist on the controller. Revert the changes, Push the changes to the controller and Unlink global configurations. Restart a controller from Controller in the plant structure. |
Create & Delete | Check box Members of the user group Create & Delete have the permissions to: Create and delete configurations on the controller. Paste configurations to the controller (copied from other controllers or from a library). Export and Import controller data to/from file from controller in Plant structure. |
| Open the folder and display the content. |
| Close the folder and hide the content. |
(X/Y) | X controllers out of totally Y controllers in the marked folder, do have the selected privilege |

A folder with no marked user rights is invisible to the user group in the plant structure .

The minimum user rights level for a folder is Read. This level makes a folder visible and its content of subfolders and controllers are also visible.

If a controller is visible, its configurations and parameters can at least be read. Additional user rights can be assigned to the user group.