Create a mapping based on a SID

Use this procedure to create a PI identity mapping based on a Windows Security Identifier (SID).

Prerequisite

Before you begin, make sure you are signed in to the Primary server.

The secondary server is read only and cannot create or modify PI identity mappings.

Create a mapping

1. Open a command prompt on the primary server, and then navigate to the ..\PI\adm directory.

2. Enter piconfig to open the PI configuration utility.

3. Update the PI Identity Mapping (PIIDENTMAP) table. You must provide values for the following attributes:

   • IdentMap: The name of the PI identity mapping.

   • PIIdent: The PI identity that you want to map to a local Windows group.

   • Principal: the SID of the Windows group you want to map to the specified PI identity.

     You can add other table attributes if needed.

Example

The following example creates a new mapping named My_Mapping. It maps a Windows group identified by the SID S-1-5-21-1234567890-1234567890-1234567890-12345 to the piadmins PI identity.

At the piconfig prompt, enter:

@table PIIdentmap
@mode create
@istr IdentMap,Principal,PIIdent
My_Mapping,S-1-5-21-1234567890-1234567890-1234567890-12345,piadmins