Configure security for objects

Set access permissions for identities to objects in the browser or the viewer in situations where access needs to be different from inherited permissions. You can also set custom permissions for identities to a specific collection in the Library.

Note: You must have administrative privileges and belong to the PI AF Administrators identity to configure security settings.

1. Choose from the following actions:

   To set access permissions for ...	Do this ...
   A browser object	Right-click the object and click Security.
   Multiple objects	With multiple objects listed in the viewer (after a search, for example), use standard Windows keystrokes to highlight contiguous (SHIFT+<click>) or non-contiguous (CTRL+<click>) objects. Right-click and click Security.

2. In the Identities list, review the identities and validate their permissions. You can also add to and remove an identity from the list.

   To ...	Do this ...
   Add or modify permissions of existing identities	Select an identity in the Identities list. In the Permissions for Identity list, select or clear the Allow or Deny check boxes beside the permissions you wish to set. Repeat for each identity.
   Add another identity to the Identities list	Click Add. In the Select Identity window, select the identity you wish to add. Click OK. The identity is added to the list. In the Permissions for Identity list, set the access permissions as needed (the default setting is all are selected). Tip: If you need to create a new identity and mapping, click New Identity. For more information, see Manage identities in PI AF.
   Remove an identity from the Identities list	Select an identity in the Identities list. Click Remove.

3. In the Child Permissions section, choose one of the permission inheritance options. For more information, see Understand permission inheritance of element objects.

4. Optional. To view all of a user's access permissions on items in PI AF based on his or her current PI AF identity mappings, click the Effective Access tab.

5. Optional. In the Domain User field, enter a user's Windows domain name whose permissions you want to view.

6. Optional. Press Tab or Enter to validate your entry.

7. Click OK.