List of required permissions for PI Server tasks
- Last UpdatedFeb 12, 2025
- 4 minute read
- PI System
- PI Server 2024 R2
- PI Server
The following table shows the permissions that are required for various tasks.
|
Task |
Database security permissions |
Permission required on the target object |
|---|---|---|
|
Archives: Backing up |
|
|
|
Archives: Create / Register / Unregister, Force Shift, Online Reprocessing |
|
|
|
Archives: Listing, Activity Grid, General Stats, Cache Stats |
|
|
|
Archives: Cache Control |
|
|
|
Auditing: Enable |
|
|
|
Auditing: View records |
|
|
|
Backups: Perform Backups |
|
|
|
Batch Database: Create / Edit / Delete / View PIUnit |
PIUnit is a module; see corresponding tasks for modules |
|
|
Batch Database: Create / Edit / Delete PIUnitBatch, PISubBatch |
|
PIUnit (r1,w) read and write permission on the target PIUnit |
|
Batch Database: Create / Edit / Delete PIBatch |
|
|
|
Batch Database: Create / Edit / Delete PICampaign |
|
|
|
Batch Database: Create / Edit / Delete PITransferRecord |
|
|
|
Batch Database: Insert / Remove PIUnitBatch into / from PIBatch |
|
PIUnit (r1,w) read and write permission on the target PIUnit |
|
Batch Database: Insert / Remove PIBatch into / from PICampaign |
|
|
|
Batch Database: View PIUnitBatch, PISubBatch |
|
PIUnit (r1,w) read and write permission on the target PIUnit |
|
Batch Database: View PIBatch |
|
If contains PIUnitBatches, also need permission on the target batch database: View PIUnitBatch, PISubBatch |
|
Batch Database: View PICampaign |
|
If contains PIBatches, also need permissions on the target batch database: View PIBatch |
|
Batch Database: View PITransferRecords |
|
|
|
Batch Subsystem: Create / Edit / Delete units and batches |
|
unit (r1,w) read and write permission on the target unit |
|
Batch Subsystem: Create / Edit / Delete aliases |
|
Permission on the target points: View attributes |
|
Batch Subsystem: View units and batches |
|
unit (r1,w) read and write permission on the target unit |
|
Batch Subsystem: View aliases |
|
Permission on the target points: View attributes |
|
Database Security Table: Edit |
|
Database security (w), write permission on the target database |
|
Database Security Table: View |
|
|
|
Digital State Sets: Create / Edit / Delete digital sets or states |
|
|
|
Digital State Sets: View digital sets or states |
|
|
|
Event Queue: Configure |
|
|
|
Firewall: Configure |
|
|
|
HA: Create / Configure a Data Archive collective |
|
|
|
Heading Sets: Create / Edit / Delete heading set |
|
heading set (r,w) read and write permission on the target heading set |
|
Heading Sets: Create / Edit / Delete heading |
|
heading set (r,w) read and write permission on the target heading set, heading (r,w) read and write permission on the target heading |
|
Heading Sets: View heading set |
|
heading set (r) read permission on the target heading set |
|
Heading Sets: View heading |
|
heading set (r) read permission on the target heading set, heading (r) read permission on the target heading |
|
Identities, Users, and Groups: Create / Edit / Delete |
|
|
|
Identities, Users, and Groups: View |
|
|
|
Mappings: Create / Edit / Delete |
|
|
|
Mappings: View |
|
|
|
Message Log: Write messages |
|
|
|
Message Log: View messages |
|
|
|
Modules: Create |
|
parent module (r1,w) read and write permission on the parent module |
|
Modules: Delete |
|
parent module (r1,w) read and write permission on the parent module, module (r1,w) read and write permission on the target module |
|
Modules: Edit |
|
module (r1,w) read and write permission on the target module |
|
Modules: Edit – Link / Unlink |
|
new parent module (r1w) read and write permission on the new parent module, module (r1w) read and write permission on the target module |
|
Modules: Edit – Add / Remove alias |
|
module (r1w) read and write permission on the target module, permission on target point: View attributes |
|
Modules: Edit – Add / Remove heading |
|
module (r1w) read and write permission on the target module, permission on the target Heading Sets: View heading |
|
Modules: View |
|
module (r1), read permission on the target module |
|
Points: Create |
|
|
|
Points: Delete |
|
PtSecurity (r,w) read and write permission on the target point's PtSecurity attribute |
|
Points: Edit attributes |
|
PtSecurity (r,w) read and write permission on the target point's PtSecurity attribute |
|
Points: Edit DataSecurity attribute |
|
PtSecurity (r,w) read and write permission on the target point's PtSecurity attribute, DataSecurity (w) write permission on the DataSecurity attribute |
|
Points: Add / Edit / Remove data |
|
PtSecurity (r) read permission on the target point's PtSecurity attribute, DataSecurity (r,w) read and write permission on the DataSecurity attribute |
|
Points: View attributes |
|
PtSecurity (r) read permission on the target point's PtSecurity attribute |
|
Points: View data |
|
PtSecurity (r) read permission on the target point's PtSecurity attribute, DataSecurity (r) read permission on the DataSecurity attribute |
|
Trusts: Create / Edit / Delete |
|
|
|
Trusts: View |
|
|
|
Tuning Parameters (Timeout Table): Create / Edit / Delete |
|
|
|
Tuning Parameters (Timeout Table): View |
|
1 module (r) / PIUnit (r) also assumes read permission for all modules in the hierarchy path above it
2 PIDS (r) is implicitly granted by PIPOINT (r)
3 PIHeadingSets (r) is implicitly granted by PIModules (r)