Security & Archive Settings tab

The settings on this tab provide default values for PI attributes that have no corresponding attributes in most data sources. When either the Sync Engine or PI APS Configuration Utility creates a PI point for an available point, the attribute default values from this tab are merged with the attributes from the PI APS Connector for the interface. If the PI APS Connector provides a value for any of these attributes, the attribute from the PI APS Connector is not replaced by the default value.

The Point & Data Default Security Settings area contains the default values that are used for security attributes when PI APS creates a PI point for an available point. The default values for data security attributes (DataAccess, DataGroup, DataOwner, and DataSecurity) are treated as a unit. If the PI APS Connector provides any of these attributes, then none of the default data security attributes in this area are merged with the attributes from the PI APS Connector. Specifically, if the PI APS Connector does not provide all three of DataAccess, DataGroup, and DataOwner, the missing attributes are not merged from this dialog box. The default values for point security attributes (PointAccess, PointGroup, PointOwner, and PointSecurity) are similarly handled as a unit.

The available options in this area depend on the PI Server version. The security model changed in PI Server version 3.4.380. If the PI Server version is earlier than 3.4.380, default values for point and data security attributes can only be specified using old security model attributes: DataAccess, DataGroup, DataOwner, PtAccess, PtGroup, and PtOwner. If the PI Server version is 3.4.380 or later, default values for point and data security attributes can be specified using either the old security model attributes or the new security model attributes: DataSecurity and PtSecurity.

If Use new security model attributes is selected, the Data Security and Point Security boxes contain Access Control Lists (ACLs). Both ACLs can be edited directly in the boxes. The Build buttons open the ACL Builder dialog box to assist in changing the corresponding ACL.

An ACL is composed of Access Control Entries (ACEs), which are listed on the right.

To change the read or write permission for an ACE, click the ACE in the list, then select or clear the Read or Write check boxes.

To add a new ACE, click a PI Identity in the list on the left, then click the button with the right-pointing arrow icon. Use the Read or Write check boxes to set the permissions for the PI Identity in the new ACE.

To delete an ACE, click the ACE, then click the button with the left-pointing arrow icon.

As changes are made, the ACL for attribute box is updated to show the revised ACL. When this box contains the completed ACL, click OK to transfer the ACL into the appropriate box in the Point & Data Default Security Settings area on the User-set Defaults for interface dialog box.

The Compression & Exception Default Settings area contains the default values that are used for compression and exception attributes when PI APS creates a PI point for an available point. If the PI APS Connector for the interface provides values for any of these attributes, the attribute value from the PI APS Connector is not replaced by the default value.

The Compdev and Excdev default values can be expressed either in engineering units or percent of span. The PI Server actually has a pair of attributes for each of these default values: one attribute in each pair is measured in engineering units and the other is percent of span. That is, the CompDev attribute is compression deviation in engineering units and the CompDevPercent attribute is compression deviation expressed as percent of span. Setting one attribute implicitly updates the other. The pair of attributes for exception deviation is ExcDev and ExcDevPercent. The list boxes for these default values select which of the two attributes for each deviation is actually set. If the PI APS Connector provides a value for either CompDev or CompDevPercent, the Compdev default value is not merged into the attributes for point creation. Similarly, if the PI APS Connector provides a value for either ExcDev or ExcDevPercent, the Excdev default value is not merged.

Take care when using engineering units for either of these default values because the default value in engineering units must be less than the span for any point that is created by PI APS. If not, point creation fails.

Note: Use percent of span for these default values, which is always valid.

The Default Settings area contains the default value that is assigned to the Shutdown attribute when PI APS creates a PI point for an available point. The general recommendation for the Shutdown attribute is that it should be Off for points whose interface is not running on the PI Server node. For interfaces running on the PI Server node, the recommended setting for the Shutdown attribute depends on a number of factors; consult the PI Server documentation for guidelines.

The PI Default buttons retrieve the default settings from PI Server for each of the attributes listed in the same area. These default settings are specific to the point class used by this PI APS Connector.

The Undo button is available after a change is made to one of the settings but is only able to undo changes before they are saved with the OK button or the Apply button.