I want to connect PI Data Archive and PI AF Server with other computer (user). How to give permission to user to create some changes in the server ? Thanks
As a standard security practise, use windows authentication if users are in same domain. Create an identity and map AD group to the identity in PI Data Archive and AF . Assign permission to the identity to tags(Point/Data Security) and AF (Elements).
Request you to check below KB article on security and best practices.
KB00833 - Seven best practices for securing your PI Server
Also recommend to check :
OSIsoft: PI Data Archive Security Deep Dive Map- Security Areas, Defaults, & Customization - YouTube
Does the server and client have to be in the same domain?
They do not necessarily have to be in the same domain. There are some considerations that you can look into for cross domain Kerberos.
Please see this link.
KB01709 - Kerberos Delegation across multiple domains
Retrieving data ...