Configure security

Navigate to the Security page on the AVEVA PI Vision Administration website to configure security.

Access to the AVEVA PI Vision website and the AVEVA PI Vision Administration website is controlled through Microsoft Windows groups, or through PI AF Identities on the User Access Levels page.

For each access group, you may manage the group through a Windows group, or through PI AF Identities. You cannot manage an access group through both methods; if you manage an access group through PI AF identities, the Windows group will be ignored, with the exception of the Administrators group. If you manage the Administrators group through PI AF identities, users in the PI Vision Admins Windows group still have access to the AVEVA PI Vision Administration website. This is necessary so that at least one user has permission to access the User Access Levels page on the Administration website and assign PI AF identities to the appropriate groups.

The access groups are:

• Administrators

  Users who perform administrative tasks within the AVEVA PI Vision application and administration site.

  The Windows group for this is PI Vision Admins.

• Users

  Users of the AVEVA PI Vision website who create, read, and interact with displays. If you manage this group through PI AF Identities, this access group is labeled Publishers and Explorers, and access is separated into two levels:

  • Publishers

    Have full access to the application and can save and share displays.

  • Explorers

    Have access to the application but cannot save or share displays.

    The Windows group for this is PI Vision Users. If you manage this access group through a Windows group, all users have publisher-level access.

    Note: If you are using OpenID Connect authentication, the PI Vision Users Windows group is not used. User access must be controlled through PI AF Identities on the User Access Levels page.

• Utility Users

  Users who have permission to connect to the AVEVA PI Vision server for the purpose of using the PI Vision Display Utility, PI ProcessBook to PI Vision Migration Utility, or the public REST API.

  The Windows group for this is PI Vision Utility Users.