Create a service account and set up permissions

Note: This section and its subsections don't apply if installing in an environment whose end users only use OpenID Connect authentication and you plan to select the authentication option OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers in the security settings. (This is the only valid option if your PI Vision server is not installed on a domain.) In that case, proceed to Run the installation kit.

After preparing the application server, create a service account (domain account) for AVEVA PI Vision, and then grant that service account permissions to access the servers that run Microsoft SQL Server, Data Archive, and PI AF. For more information, see the Microsoft Developer Network article Using a Domain User Account as a Service Logon Account.

Note: We strongly recommend that you create a custom service account for the AVEVA PI Vision application service. If you ignore this recommendation and use the default machine accounts, then you should review the other applications running on the application server computer. All applications running on this computer will have the same access permissions as AVEVA PI Vision to the servers that run Microsoft SQL Server, Data Archive, and PI AF. For security reasons, consider removing some or all of the other applications running on this computer.