I need piconfig command to add multiple identities in pipoint table in database security
i have an idea that it should look like below, but can someone please share a sample here
I am providing two examples. The first one is to view all the value from the DBSECURITY table.
The second is to modify the Security of the PIUSER from DBSECURITY
Data.csv has the following content:
PIUSER,"piadmin: A(r,w) | piadmins: A(r,w) | PIWorld: A(r,w)"
Hope this helps!
The above set of commands will
I have tested and it will add the access for identities as per the input csv and will leave the already existing identity access on that database as it is.
Nevertheless, please test this code first on a development environment before running it on production!
As suggested, will run a test first.
I tried the above, and in my case it replaced the existing settings with the number we pass in command.
Was bit scary but as you suggested i did this on test environment.
Will take care of it while working on production environment.
Is there a limit to add identities in pipoint table? e.g., maximum number of identity is "x" can be added in pipoint table , do we have any idea what "x" can be , i have a requirement to add approx 200 identities in pipoint.
I am not aware of a limit of identities but still recommend against creating PI Identities for individual users. When looking at PI System Management Tools -> Security -> Identities, Users & Groups, you will recognize predefined PI identities like 'PIEngineers' and 'PIOperators'. You could define additional PI Identities to meet your requirements. While you could create a mapping for each individual Active Directory (AD) account to a PI Identity, it is even more simple and likely more efficient to create mappings based on AD groups rather than on individual AD accounts. I believe it is a common approach to create AD groups with names matching up the PI Identity name e.g. 'PIOperators' AD group for 'PIOperators' PI Identity. Individual user access is then driven through the AD Group membership.
I suggest you to take a look at the Security configuration documentation including its sub chapters. You may also be interested in Security configuration in PI AF.
With ~ 200 individual accounts, you may still be interested in automating the process of assigning individual AD accounts to AD groups. For the purpose, I suggest looking into Add-ADGroupMember PowerShell cmdlet.
Retrieving data ...