Migrate to AF identity-based data security

Migration to AF identity-based data security is only necessary when the application impersonation security setting is on for the PI Integrator for Business Analytics and you are preparing to upgrade to PI Integrator for Business Analytics 2020 R2 SP2 Patch 1. If your users and resources, such as the PI AF servers, are in a single domain or in a two-way forest trusted domain environment, migration is included as a part of the regular upgrade process within the PI Integrator for Business Analytics installer for both interactive and silent upgrades. Most upgrades do not require any steps outside of the installer to migrate to AF identity-based data security.

If your PI Integrator for Business Analytics is installed in a one-way forest trust domain environment where view creator users are in a user domain, and the PI Integrator for Business Analytics service account and resources such as PI AF are in a separate resource domain, you will need to take an additional step before running the installer. Run the Identity Migration Tool separately on a machine within your user domain to prepare your existing views to use the AF identity-based data security model. 

The Identity Migration Tool prepares your PI Integrator for Business Analytics views to use the new AF Identity-based data security model.

• AVEVA recommends first running the tool in a preview-only mode, which generates a report of expected results but does not modify your view element template or view elements.

• The generated backup, log, and report files have the date and time appended to them so that new runs do not overwrite the results of old ones, for example SetupPIIntegratorSetup_IdentityMigration_Report_Preview 2022-08-02_07-34-44-188.html.

When in non-preview mode, the Identity Migration Tool will:

1. Take an XML backup of your existing view elements specified by the InstancePath you pass to the tool.

2. Modify the PI_INTEGRATOR_VIEW element template.

3. Modify existing attributes in the AF Configuration database included in the InstancePath that you specify to prepare them for upgrade to use the AF Identity-based security model.