AVEVA™ PI System™ Feedback Portal

Welcome to our feedback site!


We created this site to hear your enhancement ideas, suggestions and feedback about AVEVA products and services. All of the feedback you share here is monitored and reviewed by the AVEVA product managers.

To start, take a look at the ideas in the list below and VOTE for your favorite ideas submitted by other users. POST your own idea if it hasn’t been suggested yet. Include COMMENTS and share relevant business case details that will help our product team get more information on the suggestion. Please note that your ideas and comments are visible to all other users.


This page is for feedback specifically for AVEVA PI System. For links to our other feedback portals, please see the tab RESOURCES below.

ADD A NEW IDEA

Security

Showing 20

OIDC authentication with federated accounts (through CONNECT) requires too many steps

Currently, it is a 5-step process to get authenticated. After the first authentication, it is only a 3-step process, but still clunky.
Laurie Dieffenbach 10 days ago in AVEVA™ PI Server / Security 0 No status

Allow Federation of ClientIDs and tokens from Entra ID into AVEVA Identity Manager

For clients who previously relied on claims authentication with PI Web API, it would be useful to be able to reproduce a similar authentication flow with bearer authentication and the AVEVA Identity Manager in PI Server 2023. Currently, federation...
Housnat Aboubacar about 2 months ago in AVEVA™ PI Server / Security 1 No status

Have Platform Common services for PI use least privilege access on the Azure directory

Some Azure Active Directory (Entra ID) administrators will be hesitant to give the registered application for the AIM Server Directory.Read.All privileges. It should be feasible to give the application lesser privileges on the directory while stil...
Housnat Aboubacar 5 months ago in AVEVA™ PI Server / Security 0 No status

Implement High Availability in AVEVA Identity Manager (AIM)

A few limitations make difficult to architect AIM with PI 2023: No support for NLB No support for failover cluster No support for multiple independent AIM instances As of today, AIM is a single point of failure and so HA is required to preven...
FABIO VENTURUZZO 6 months ago in AVEVA™ PI Server / Security 0 No status

Auditviewer separation of roles

I want to separate the security roles between 1) the ability to run an Auditviewer report and (potentially) associate a change control record to a configuration change and 2) the PI Admin Role in order to minimize security risk.
Guest over 2 years ago in AVEVA™ PI Server / Security 1 No status

Add configurable defaults for PI Point "Pointsecurity" and "Datasecurity"

Read access to the PIPOINT table is required for most identities. Pointsecurity and Datasecurity currently use the settings on the PIPOINT table as the default. New points will generally give read access to most identities because of these default...
Guest over 2 years ago in AVEVA™ PI Server / Security 2 No status

Have pre-made PI Identities with minimum permissions by default

It currently takes more effort to follow AVEVA's recommendation of setting minimum permissions for all PI service accounts than it is to use fewer service accounts with more permissions. To help steer PI administrators in the right direction, plea...
Kenneth Barber over 2 years ago in AVEVA™ PI Server / Security 2 No status

Change process to release security patches

Hello, whenever Osisoft identifies security issues on PI / PI AF, they deliver fixes through the next release of these applications. This is not convenient as upgrading to a new release is a risk that we don't like to be forced to take and has a ...
Guest over 2 years ago in AVEVA™ PI Server / Security 1 No status

Remove and disable permissions that do not apply in PI System Explorer's Security Configuration window

In PI System Explorer → File → Database → Edit Security, the "Permissions for" box always lists all permissions that can possibly be set within PI AF, regardless of the selected objects. Instead, only permissions that apply to the selected objects...
Kenneth Barber over 2 years ago in AVEVA™ PI Server / Security 3 No status

Officially test compatibility with Windows Security Baselines

As a PI System administrator, I need to harden the OS of my servers consistent with industry best practices so that they are resilient to attack and random disruption. Official testing of compatibility with industry standards such as the Windows ...
Guest over 2 years ago in AVEVA™ PI Server / Security 0 No status