Create mappings

Once you have the necessary PI identities and Windows groups, you need to map each Windows group to a PI identity. The mapping associates the specified PI identity with the specified Windows group. Members of that Windows group will be authenticated automatically on the Data Archive server as the specified PI identity.

1. Open PI SMT.

2. Under Collectives and Servers, select the server.

3. Under System Management Tools, select Security > Identities, Users, & Groups.

4. Select the PI Identities tab.

   If you do not see the PI Identities tab, verify that you are connected to a PI Server 3.4.380 or later. This tab does not appear in PI SMT with earlier versions of the Data Archive server.

5. Double-click the identity to open the Properties dialog box.

6. Click the Mappings and Trusts tab.

   The top portion of the dialog box shows all existing mappings for this PI identity. The bottom portion shows all existing PI trusts for this PI identity.

7. Click the Add button under the mappings portion of the dialog box to open the Add New Mapping dialog box.

   There is also an Add button under the trusts portion, so be sure to click the right button.

   Note: The Add button is disabled if the selected PI identity is flagged as disabled or not usable in a mapping.

8. In Windows Account, enter the Windows group.

   To select the account either:

   • Click the browse button to browse for the account.

   • Type in the account name. If you choose to type in the account name, click the resolve SID button to verify that this is a valid account. If the account is valid, an SID appears in the field. Otherwise, a dialog box with an error message opens.

9. Enter a description of the mapping (optional).

   There are no restrictions on the contents of this field.

10. Click OK.

    The new mapping appears under Mappings.