PI AF object and local machine permissions for PI Notifications

When the PI Notifications Service is installed from the PI Server install kit, the following actions are taken:

• The PI AF identity "Notifications" is created.

• The PI Notifications Service account is mapped to the PI AF Notification identity.

• The new identity is granted the PI AF object permissions listed in the following tables.

The setup process also grants the PI Notifications Service account permission to access the local machine directory.

Note: If an account has administration privileges on the PI AF server, then the account has all security rights to all objects within the PI AF server, including all databases. This is true whether the account is granted or denied specific rights on individual objects.

If you change the PI Notifications Service log on account after installation, you must make sure the new user has permissions to access necessary AF objects. The easiest way to do this is to add a mapping for the user to the Notifications identity in the PI AF server. The sections below describe the necessary permissions in detail.

PI AF server

Local machine permissions