Operating system permissions for buffering

Accounts used to configure and run PI Buffer Subsystem must have these permissions on the buffered computer.

Permissions for the PI Buffer Subsystem service

Note: PIbufss no longer has to belong to the Local Administrators group, and the Buffering Manager will no longer add the service to that group.

These are the required permissions for the account used to run the PI Buffer Subsystem service.

• The ability to log on as a service. When you use Buffering Manager to configure buffering, it ensures that the account has this ability.

• Read and write access to the %ProgramData% folder. If there is already an \OSIsoft subfolder in this folder, then read and write access to the \OSIsoft subfolder is also required.

  Note: The %ProgramData% folder is defined as %SystemDrive%\ProgramData on Windows Vista and later, and %SystemDrive%\Documents and Settings\All Users\Application Data on Windows Server 2003 SP2.

• If you set the QUEUEPATH parameter, read and write access to the folder specified by QUEUEPATH is also required.

• Read and write access to the \PIPC\dat folder on the buffered computer. (For 64-bit operating systems, this means access to both %PIHOME%\dat and %PIHOME64%\dat.)

• The interface service account needs to have read/write permissions on the FILEBUFPATH directory (%PIHOME%\dat by default if not specified).

• (For PI API buffering) The ability to create global objects on the buffered computer. Create global objects is a user right defined by a local security policy setting in Microsoft Windows operating systems. Some types of user accounts, including administrator accounts, have this user right by default.

Permissions for users who configure buffering

Installing PI Buffer Subsystem 4.3 or later creates a Windows group named PI Buffering Administrators. This group has the permissions required to configure PI Buffer Subsystem, and is provided for your convenience. You can add accounts to this group for users who are not local Administrators, but who need to configure buffering using Buffering Manager.

Users who manage PI Buffer Subsystem must also have the ability to start, stop, and restart services to control the PI Buffer Subsystem service. This permission applies to the user managing the service, not the PI Buffer Subsystem service account.

Note: Having permissions to configure PI Buffer Subsystem does not automatically grant the ability to start, stop, or restart services. These actions require additional Windows services management permissions.