PI mappings

PI mappings create an association between a PI identity, user or group to one of the following:

1. A Windows user or group (such as an AD group)

2. An Identity Management service role

A role is a group of users with similar job functions and access permissions. Roles are stored and managed by the Identity Management service. Role members that are mapped to a PI identity inherit the same access permissions as the PI identity.

Note: The AVEVA Identity Manager is the provided identity service for PI Server 2023.

OpenID Connect (OIDC) can be used to map a role to a PI identity. OIDC provides a secure way to map roles to PI identities through claims, and then grant members of the role the same level of access to PI Server resources.

To view or edit the mappings for a particular PI identity, PI user, or PI group, use the Manage identities, users, and groups tool.