Learn about PI AF Link access permissions

PI AF Link requires access permissions on both the Data Archive server and the PI AF server. The PI MDB to AF wizard automatically configures this access, so you don't need to do anything unless you change the default settings.

• On the Data Archive server, PI AF Link runs as a Windows service called PI AF Link Subsystem. The account that the PI AF Link service runs under on the Data Archive server requires:

  • Read and write access to the Data Archive dat and log folders

  • Membership in the AF Link to PI Windows group on the PI AF server

  • Read and execute permissions to %PISERVER%\bin and %PISERVER%\bin\piaflink.exe

    Note: Do not use the same user account to make direct changes to PI AF elements. If you use the PI AF Link user to edit elements, then your changes will not be synchronized with the PI Module Database.

• On the PI AF server, PI AF Link gets its user privileges as a member of a Windows group known as the AF Link to PI Windows group. The AF Link to PI Windows group requires:

  • Read, read data, write, write data, delete and admin access on the target AF Database and the Data Archive element

  • Read, write, delete and admin access on the AF Categories collection on the target database

  • Read, write, delete and admin access on the Identities and Mappings collections on the target PI AF server

  • That the account PI AF Link uses on the Data Archive server must be a member of the AF Link to PI Windows group

    Note: If the Data Archive and PI AF servers are on different, non-trusted domains, you must manually configure PI AF server access.