I have a domain group, let's call it PIVisionUsers. I added a domain user to this group so they have access through the firewall and can navigate to the PIVision website. They can see all the shared graphics and open them, but they don't see the actual data values. I, having mapped my domain account to the piadmins group, can see the data.
I have not mapped this user or the PIVisionUsers domain group to a PI Identity. I think the right way to go is to map the PIVisionUsers domain group to a new identity (I am thinking of the using the same name). What I am unsure of is whether to add the new identity to an existing group, or create a new group and modify permission on specific tables/databases to give the new group read/read data.
What tables and which permissions would need to be modified?