6 Replies Latest reply on Feb 14, 2019 7:02 PM by caffreys_col

    Disable "New Display" button for users

    caffreys_col

      I'd like to be able to allow people to view displays in PI Vision, but not create their own using the New Display button. Is there a way to limit individual users (our groups) using PI Identities/groups so that they can view but not create new displays?

        • Re: Disable "New Display" button for users
          jdryden

          Hi Colin,

           

          PI Vision 2017 and later supports assigning AF Identities to "Publisher" and "Explorer" roles. Publishers can create and save displays. Explorers can view displays but cannot save displays. Note that Explorers can still access the New Display canvas and attempt to build displays, but they will not be able to save them.

           

          Information on assigning these roles is in Live Library here.

           

          --James

            • Re: Disable "New Display" button for users
              caffreys_col

              Hi James,

               

              Thanks for the help. I've added the PI-AF group "PI Vision Publishers" to the security tab in PI-AF, via the Database->Edit security function. It wasn't visible before in the list of "available AF identities" in the admin console before, but after my modification it is. I've then mapped 2 Active directory users to that identity. Does that sound OK? Should I even be using the PI Vision Publisher identity or is it a reserved one?

               

              I've noticed that the PI Vision Publisher has full access rights  ("All") in the database security settings; what do I need to edit to only allow access to create PI vision displays?

               

              -Colin

                • Re: Disable "New Display" button for users
                  jdryden

                  Hi Colin, you can follow the steps on this page to add the AF Identities to the "Explorers" list on the PI Vision admin site. This site is accessible at a URL like the one below:

                   

                  https://MyWebServer/PIVision/Admin

                   

                  You will need to go to the User Access Levels page and select Choose Publisher or Explorer access levels...

                   

                  Then assign AF Identities to the two categories using the panes that appear:

                   

                  *Edit: I forgot to answer your other question: you can feel free to use any AF Identity to assign Explorer/Publisher roles. If you have an AF Identity named "PI Vision Publishers" then that will be suitable -- this Identity is not reserved.

                    • Re: Disable "New Display" button for users
                      caffreys_col

                      I've done the Pi Vision Admin stuff. Everything works, I'm just curious why there is an Identity in PI-Af called PI -Vision Publisher, which isn't part of the security for any of the databases. When I added it to the list of database Identities, then it appeared in the list of users in the PI vision admin window. I'm not sure if I should be using this account (PI Vison Publisher) or not! It seems like it is a default one. Should I turn off the access to the PI-AF databases it is linked to or not? Currently it has full read/write access, which is a bit worrying but I'm not sure if by removing its permissions  to the databases whether it will be able to publish displays. I think I will have to have a play.