Learn how to manage user access permissions with Windows groups

The access permissions for each Windows user are determined by the PI identities that user is associated with. Each Windows group is mapped to a PI identity. Windows users that belong to that Windows group get the access permissions for that PI identity.

Windows users that belong to more than one Windows group get the cumulative access permissions for all the associated PI identities. For example, in the following illustration, the Windows user, Bob, belongs to both Windows groups. Bob, therefore, gets the permissions configured for PI Identity1 and PI Identity2.

Look at the access needs for all your Windows users. Which Windows groups do the users belong to? Which PI identities do those Windows groups map to? Make sure that each Windows user belongs to the appropriate Windows groups.