Permissions for service accounts

When the PI AF application service runs under a domain account, that domain account requires special permissions to manage SPNs for the PI AF application service. By default, domain administrator users have the ability to change these permissions. Generally, a domain administrator manages service account permissions. Ensure the service accounts related to PI AF server have the following permissions assigned:

• Read servicePrincipalName

• Write servicePrincipalName

  Note: If your PI AF application service or SQL Server service are running under the local Network Service account or a Virtual Account for the Network Service (such as those used by default in SQL Server or the default account used for the PI AF Application Service), you can skip this section.