Create PI identities to fill gaps

Some of your old PI users might have access permissions that do not match the access permissions of any of your PI groups. Ideally you should create a PI identity for each set of access permissions that you need. You then need to set the access permissions for each new PI identity. See Understand PI identities.

If you decide to keep PI user and PI groups for some period of time, you should at least create mappings for them. Windows authentication is much more secure than PI password authentication.