A setting apparatus configured to perform a setting of an I/O module including a plurality of first connectors (CN) to which field devices are connectable and a second connector to which a controller controlling the field devices is connectable, comprising: a user authenticator configured to authenticate an operator that is using the setting apparatus ; and a user authorizer configured to assign operation authorization to the operator authenticated by the user authenticator on the basis of previously set authorization definition information, the operation authorization allowing the operator to perform at least one operation using the setting apparatus , characterized in the authorization definition information including an I/O list (L1), an authorization list (L2), and a user list (L3), the I/O list (L1) including first information defining whether or not a change of input and output information of the relevant field device connected to each of the first connectors (CN) is permitted, the authorization list (L2) including second information defining whether or not a change of each item of the input and output information is permitted for each role of the operator, the user list (L3) including third information in which the operator and the role of the operator are associated with each other, wherein the user authorizer is configured to refer to the first information in the I/O list (L1) and to determine whether or not a change of input and output information of the field device is permitted for each of the first connectors (CN), and if the user authorizer determines that a change of input and output information of the field device is permitted for each of the first connectors (CN), the user authorizer is configured to refer to the authorization list (L2) and the user list (L3) and to determine whether or not a change of each item of the input and output information is permitted on the basis of the role of the operator authenticated by the user authenticator . a user authenticator configured to authenticate an operator that is using the setting apparatus ; and a user authorizer configured to assign operation authorization to the operator authenticated by the user authenticator on the basis of previously set authorization definition information, the operation authorization allowing the operator to perform at least one operation using the setting apparatus , characterized in the authorization definition information including an I/O list (L1), an authorization list (L2), and a user list (L3), the I/O list (L1) including first information defining whether or not a change of input and output information of the relevant field device connected to each of the first connectors (CN) is permitted, the authorization list (L2) including second information defining whether or not a change of each item of the input and output information is permitted for each role of the operator, the user list (L3) including third information in which the operator and the role of the operator are associated with each other, wherein the user authorizer is configured to refer to the first information in the I/O list (L1) and to determine whether or not a change of input and output information of the field device is permitted for each of the first connectors (CN), and if the user authorizer determines that a change of input and output information of the field device is permitted for each of the first connectors (CN), the user authorizer is configured to refer to the authorization list (L2) and the user list (L3) and to determine whether or not a change of each item of the input and output information is permitted on the basis of the role of the operator authenticated by the user authenticator . <EOS>