Understand security synchronization

PI AF Link synchronizes security between PI AF and PI MDB such that each PI module has the same access permissions as the corresponding AF element. Further, the access permissions on the Data Archive element in PI AF are the same as the database security settings for PIModules in Database Security on the Data Archive server.

Both PI AF and the Data Archive server leverage Windows for implementing security, but the extent and mechanism of the implementations are different. Because of these implementation differences, it is possible for the security configuration in PI MDB to diverge from that in PI AF, potentially causing access problems for users.

If the security settings are out of sync, then users might have different levels of access to the same content, depending on whether they are using MDB or AF clients. In some cases, access to a module might be restricted to the piadmin account. The AF Link tool in PI SMT displays a report of any areas where the security is unsynchronized.