Understand Authentication Mode Upgrade Utility

You can use the Authentication Mode Upgrade Utility to update the authentication mode to either Enterprise mode or Hybrid mode. On running this utility, the authentication mode is updated, and the external group is mapped to the Tenant Administrator Group. Users who are part of the mapped Tenant Administrator Group, can now login to the AVEVA Mobile Operator app with Tenant Administrator privileges.

Run the Utility

Perform the following steps to run the utility:

Before You Begin:

• Copy the "\Utilities\AuthenticationModeUpgradeUtility" folder and all its contents from the installation media to the desired location on the local machine.

Steps:

1. Launch the Authentication Mode Upgrade utility by double-clicking the ‘AuthenticationModeUpgradeUtility.exe’ file.

   The Mobile Operator Configuration window appears.

2. In the Connection String, select the ellipses and provide the following details in the Select a database window:

   • Server: Enter the server name.

   • Database: Enter the database name for which you want to establish the connection.

   • Select the required authentication and provide the user name and password.

     • Windows Authentication

     • SQL Server Authentication

   • Select OK.

     The Select a database window closes and the Mobile Operator Configuration window appears.

3. In the Authentication Mode, select authentication mode as Enterprise or Hybrid.

4. Manually enter the Group ID. To fetch the Group ID, do the following:

   • For Active Directory or Azure Active Directory, see the Microsoft documentation.

   • For CONNECT, perform the following steps:

     1. Access the CONNECT page and sign in.

     2. In the main navigation, select User management and select Groups.

        A list of groups appears.

     3. Select the group you wish to map to the utility.

        In the browser URL, the Group ID is displayed.

        

     4. Copy the Group ID and paste it in the Group ID field of the utility.

5. Select Submit.

   A confirmation message appears, indicating that the configuration update was successful. This Group ID will be mapped to the Tenant Administrator Group.

By default, the Tenant Administrator Group will have all System permissions at Tenant level. However, if you want to assign Application Permissions to the users in the Tenant Administrator Group, then you can:

6. Depending on the authentication mode, add a new Local or an Active Directory group.

7. Manually assign permissions and users to that group.