Configure user access through PI Vision Windows groups

The AVEVA PI Vision setup program creates the following local user groups on the AVEVA PI Vision application server. Configure any Windows groups that you will use to manage AVEVA PI Vision access. Ignore any groups that are for access that you will instead manage through PI AF identities.

• PI Vision Admins

  This group has access to:

  • Administer AVEVA PI Vision via the AVEVA PI Vision Administration website.

  • Restricted functions in the AVEVA PI Vision application such as reassigning displays to another user.

  • View and edit all displays.

  • Additionally, they have all the access rights of PI Vision Users and Utility Users.

    By default, this group contains only the user who ran the installation. Manually add all users who will perform administrative tasks within the AVEVA PI Vision application.

• PI Vision Users

  This group has full user access to the AVEVA PI Vision application and can view, save, and share displays.

  Add all AVEVA PI Vision website users to this group. By default, this group includes Authenticated Users. This grants access to the AVEVA PI Vision application to all domain users and also users from trusted domains. To limit access to AVEVA PI Vision, remove Authenticated Users from the PI Vision Users group and add only the users that should have access to AVEVA PI Vision. You can add Active Directory groups to the PI Vision Users local group to make managing users easier.

• PI Vision Utility Users

  This group has permission to connect to the AVEVA PI Vision server for the purpose of using the PI Vision Display Utility, PI ProcessBook to PI Vision Migration Utility, or the public REST API.

  Add all users of these utilities to this group.

If you cannot create local Windows groups due to security restrictions in your environment, see Configure user access without local Windows groups.