Historian Server OS Groups and Accounts

aaAdministrators

Group

This user group provides read/write access for Historian Data, Batch Logon Privilege, write access to ArchestrA registry Hive and additional privileges on Runtime Database. A SQLServer service account (MSSQLServer) is added to this group to allow permitted users to perform data insertion to Historian through SQL.

aaPowerUsers

Group

Membership in this user group provides read/write access for Historian Data and Batch Logon Privilege. This user group also supports the HTTPS protocol for the InTouch Web Client.

aaReplicationUsers

Group

Membership in this user group allows its members to replicate data (Tier 2), and provides Batch Logon privilege.

aaUsers

Group

Membership in this user group provides read access for Historian data.

NT SERVICE\ aahClientAccessPoint

Windows Service Account

The Client Point Access Point Service is the data ingest layer.

NT SERVICE\ aahSearch Indexer

Windows Service Account

The Search Indexer Service indexes the tags to Historian Server.

NT SERVICE\ InSQLConfiguration

Windows Service Account

The InSQL Configuration Service manages the Historian Services.

NT SERVICE\ InSQLEvent System

Windows Service Account

The InSQL Event Service is the account for the Classic Event System service.

NT SERVICE\ InSQLManual Storage

Windows Service Account

The InSQL Manual Storage Service is the data import service that processes CSV file imports.

NT SERVICE\ InSQLStorage

Windows Service Account

The InSQL Storage Service is the Classic Storage Service that transforms data from the legacy IDAS service.

NT SERVICE\ InSQLIndexing

Windows Service Account

The InSQL Indexing Service is for indexing the History Blocks.

NT SERVICE\ InSQLIOServer

Windows Service Account

The InSQL IO Service provides access to data through Suitelink.

NT SERVICE\ InSQLSystemDriver

Windows Service Account

The InSQL System Driver Service captures data for System Tags.

NT SERVICE\ aahInSight

Windows Service Account

The aahInSight Service is for AVEVA InSight.

NT SERVICE\ aahSupervisor

Windows Service Account

The aahSupervisor Service is for the InSight Publisher host process.

ArchestrAWeb Hosting

aahClientAccessPoint

aahClientAccessPoint is added to this group to allow access to the PCS certificate used for encrypting the transport.

InSQLIOServer

InSQLIOServer is added to this group to allow Secure Suitelink communication.

Performance Monitor Users

Historian Service (multiple Windows Service Accounts)

The Historian services are added to this group to acquire the performance counter information that will be historized as system tags.

Performance Log Users

Historian Service (multiple Windows Service Accounts)

The Historian services are added to this group to allow logging performance counters.