Map the PI identity to the service account

Note: This section doesn't apply if installing in an environment whose end users only use OpenID Connect authentication and you plan to select the authentication option OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers in the security settings. (This is the only valid option if your PI Vision server is not installed on a domain.) In that case, proceed to Run the installation kit.

To map the PI identity to the AVEVA PI Vision service account, create a PI mapping:

1. Open PI System Management Tools (SMT).

2. Under Servers, select the server.

3. Under System Management Tools, select Security > Identities, Users, & Groups.

4. Select the PI identity that you want to map.

5. In the toolbar, select the properties button .

   The Properties window opens.

6. In the Properties window, select the Mappings and Trusts tab.

   

   The top portion of the window shows all existing mappings for this PI identity. The bottom portion shows all existing PI trusts.

7. Select the Add button under the mappings portion of the window.

   Note: The Add button is disabled if the selected PI identity is flagged as disabled or not usable in a mapping.

   The Add New Mapping window opens.

   

8. In the Windows Account field, enter the AVEVA PI Vision service account you created earlier. To select the account either:

   • Select the browse button to browse for the account.

   • Type in the account name. If you choose to type in the account name, select the resolve SID button to verify that this is a valid account. If the account is valid, an SID appears in the field. Otherwise, a dialog box with an error message opens.

9. Select Create.

10. In the Properties window, select OK.

If you have difficulty creating the mapping, select the Help button in PI SMT.