The piadmin user
- Last UpdatedJan 13, 2023
- 1 minute read
- PI System
- PI Server 2018
- PI Server
The piadmin user is the built-in Data Archive super-user account. As piadmin you have complete access to all objects and operations on the Data Archive server, regardless of the security specification. You cannot delete or disable this powerful account.
Previous versions of the Data Archive server reserved several maintenance operations for the piadmin account. You could not delegate these operations. This led to the common practice of using the piadmin account for all administrative tasks. This is a dangerous practice because the piadmin account is so powerful.
On version 3.4.380 and later, the PI Server reserves no tasks for the piadmin account. You should not use the piadmin account for any normal administrative tasks. Delegate common administrative tasks to piadmins (or to a different PI group or PI identity) and rely on the piadmin account only for exceptional or recovery procedures. See The piadmins group.
You should take further steps to protect the piadmin account, if possible. See Understand how to protect piadmin in PI SMT.