Historian Server OS groups and accounts
- Last UpdatedJan 22, 2025
- 2 minute read
For System Platform 2023 R2 SP1, Historian Server creates and uses the following user accounts, service accounts, and user groups.
|
Name |
Category |
Description |
|
aaAdministrators |
Group |
This user group provides read/write access for Historian Data, Batch Logon Privilege, write access to System Platform registry hive and additional privileges on Runtime Database. A SQLServer service account (MSSQLServer) is added to this group to allow permitted users to perform data insertion to Historian through SQL. |
|
aaPowerUsers |
Group |
Membership in this user group provides read/write access for Historian Data and Batch Logon Privilege. This user group also supports the HTTPS protocol for the InTouch Web Client. |
|
aaReplicationUsers |
Group |
Membership in this user group allows its members to replicate data (Tier 2), and provides Batch Logon privilege. |
|
aaUsers |
Group |
Membership in this user group provides read access for Historian data. |
|
NT SERVICE\ aahClientAccessPoint |
Windows Service Account |
The Client Point Access Point Service is the data ingest layer. |
|
NT SERVICE\ aahSearch Indexer |
Windows Service Account |
The Search Indexer Service indexes the tags to Historian Server. |
|
NT SERVICE\ InSQLConfiguration |
Windows Service Account |
The configuration service manages configuration of the historian and general runtime operation. |
|
NT SERVICE\ InSQLEvent System |
Windows Service Account |
The event system service is the account for the Classic Event System service. It detects user-defined events and performs specified actions. |
|
NT SERVICE\ InSQLManual Storage |
Windows Service Account |
The Historian Manual Storage service processes late, forwarded, CSV, and manually updated/inserted data. |
|
NT SERVICE\ InSQLStorage |
Windows Service Account |
The Historian Storage service is the Classic Storage Service that transforms data from the legacy IDAS service. |
|
NT SERVICE\ InSQLIndexing |
Windows Service Account |
The Historian Indexing service is for indexing the History Blocks. |
|
NT SERVICE\ InSQLIOServer |
Windows Service Account |
The Historian IOServer is the Classic IO Service that provides access to data through Suitelink. |
|
NT SERVICE\ InSQLSystemDriver |
Windows Service Account |
The Historian System Driver Service captures data for System Tags and generates diagnostic information. |
|
NT SERVICE\ aahInSight |
Windows Service Account |
The aahInSight Service is for AVEVA InSight. |
|
NT SERVICE\ aahSupervisor |
Windows Service Account |
The aahSupervisor Service is for the InSight Publisher host process. |
Historian account group membership
The following accounts and groups support Historian functionality:
|
Group |
Account |
Description |
|---|---|---|
|
ArchestrAWeb Hosting |
aahClientAccessPoint |
aahClientAccessPoint is added to this group to allow access to the PCS certificate used for encrypting the transport. |
|
InSQLIOServer |
InSQLIOServer is added to this group to allow Secure Suitelink communication. |
|
|
Performance Monitor Users |
Historian Service (multiple Windows Service Accounts) |
The Historian services are added to this group to acquire the performance counter information that will be historized as system tags. |
|
Performance Log Users |
Historian Service (multiple Windows Service Accounts) |
The Historian services are added to this group to allow logging performance counters. |