Understand default configuration for access permissions

The Data Archive server has an identity, a user, and a group that come preconfigured with access permissions:

• The PIWorld identity has read-only access to most PI resources. If the PIWorld identity is not disabled, then all authenticated users get at least PIWorld access.

• For new installations, the piadmins group has read/write access to all Data Archive resources. On Data Archive servers that are upgraded from an earlier version, the piadmins group has no preconfigured access permissions.

• The piadmin user is the super-user account. It has guaranteed read/write access to all Data Archive resources, regardless of security settings.

The Data Archive server also includes the PI Operators, PI Engineers, and PI Supervisors identities. These sample identities have no preconfigured access permissions, so they do not really do anything. However, you can use them as a starting point. These sample PI identities are completely configurable and can be deleted.