Grant a PI identity the required access permissions

Note: This section doesn't apply if installing in an environment whose end users only use OpenID Connect authentication and you plan to select the authentication option OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers in the security settings. (This is the only valid option if your PI Vision server is not installed on a domain.) In that case, proceed to Run the installation kit.

To grant a PI identity read access to the PI points on a Data Archive server, you need to grant that identity read access to the PIPOINT database table.

1. Run the PI System Management Tools (SMT) application.

2. Under Servers, select the server.

3. Under System Management Tools, select Security > Database Security.

4. Double-click the PIPOINT database table.

5. In the Security for PIPOINT window, select Add to add a new PI identity.

6. In the Select window, find and select the PI identity, select Add, and then select OK.

7. In the Security for PIPOINT window, select the newly added PI identity, and then select the Read check box to grant the identity read access.

8. Grant read access to the point data for each PI point.

   The simplest method is to use the PI Builder plug-in to edit the points in bulk. See the PI Server topic Edit PI points.

   Alternatively, you can use the Point Builder tool in PI SMT to edit point security on each point:

   1. In the System Management Tools pane of PI SMT, expand Points > Point Builder.

   2. Select Search to open the Tag Search window.

   3. Search for the PI points that the new PI identity needs to access, select them, and then select OK to add them to Point Builder.

   4. Select the Security tab and then select the PI points added to Point builder.

   5. Under Point Security, select the PI identity, and then select the Read check box.

   6. Under Data Security, select the PI identity, and then select the Read check box.

   For more information, see the PI Server topic Configure point security.