Grant the PI AF identity the required access permissions

Note: This section only applies if installing in an environment whose end users only use OpenID Connect authentication and you selected the authentication option Use OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers. (This is the only valid selection if your PI Vision server is not installed on a domain.) Otherwise, proceed to Configure security.

Grant the PI AF identity read access to the PI AF server and PI AF databases that you want to access through AVEVA PI Vision.

1. Open PI System Explorer.

2. Select File > Connections.

   The Servers window opens and lists all PI AF servers.

3. Right-click the connected PI AF server and select Security.

4. Select Add to add the identity that you have created.

5. In the Select Identity window, select the required PI AF identity and allow read permissions by selecting Allow.

6. Select Apply then select OK.

7. Close the Servers window.