AVEVA™ PI System™ Feedback Portal

Welcome to our new feedback site!


We created this site to hear your enhancement ideas, suggestions and feedback about AVEVA products and services. All of the feedback you share here is monitored and reviewed by the AVEVA product managers.

To start, take a look at the ideas in the list below and VOTE for your favorite ideas submitted by other users. POST your own idea if it hasn’t been suggested yet. Include COMMENTS and share relevant business case details that will help our product team get more information on the suggestion. Please note that your ideas and comments are visible to all other users.


This page is for feedback specifically for AVEVA PI System. For links to our other feedback portals, please see the tab RESOURCES below.

Add a new idea Subscribe
Status No Status
Product AVEVA™ PI Server
Categories Security
Created by Kenneth Barber
Created on Aug 20, 2022

RELATED IDEAS

Have pre-made PI Identities with minimum permissions by default

It currently takes more effort to follow AVEVA's recommendation of setting minimum permissions for all PI service accounts than it is to use fewer service accounts with more permissions. To help steer PI administrators in the right direction, please bundle the PI Data Archive with 1 PI Identity for every non-deprecated PI program and assign them minimum permissions in the Database Security table by default. This way, it is easier to simply use the pre-made minimum-permission PI Identities than it is to create a new PI Identity that encompasses multiple programs.

  • Attach files
  • Kenneth Barber
    Reply
    |     Aug 20, 2022
    I should have said "starter" instead of "built-in". I feel that these PI Identities should still be deletable but come with the PI Data Archive preconfigured with minimum permissions in the Database Security tables. I realize that a single PI Data Archive can deal with multiple instances of a product, but this will at least be a good start and a step in the right direction. This suggestion also applies to the PI Asset Framework, similar to the suggestion linked below: https://feedback.osisoft.com/forums/555148-pi-server/suggestions/36368050-identities-starting-pack
  • Kenneth Barber
    Reply
    |     Aug 20, 2022
    Even though the PI Interface Configuration Utility is not deprecated, I feel that it should be excluded from the starter PI Identities, since it would require permissions to the PI Module Database, which is deprecated. The PI Interface Configuration Utility helps with but is not necessary for configuring PI Interfaces.