Steve Boyko

Lowering Your Own Access

Discussion created by Steve Boyko Champion on Mar 31, 2020
Latest reply on Apr 1, 2020 by Roger Palmen

Is there a way, using standard PI client tools like ProcessBook or DataLink, for you to lower your access to a PI Data Archive or AF server without making configuration changes on the PI server side?

 

When you connect to a DA or AF server, you get the union of all access rights you are entitled to. If you're a member of an administrator group and also a member of a read-only group, you are mapped to both the administrative and read-only identities.

 

Is there a way to temporarily "leave" the administrative group?

 

I want to do some testing and remove my own administrative rights, without having to change mappings on the PI server or leave an Active Directory group... because once I leave, it's harder to get back in!

 

There is another option, to "connect as", but that requires more domain accounts set up for that purpose. I'd rather not go that way but it may be the only way to do this.

 

Thanks for your input.

Outcomes