PI Interface Configuration Utility (PI ICU) is supposed being used on Interface nodes to configure interfaces. Alternatively interface startup files can be maintained manually but the use of PI ICU is recommended. PI ICU can connect to the PI Data Archive based on a PI Trust or through Windows Integrated Security (WIS). The trusted or mapped PI identity must have read/write access to PI Module Database (MDB) because this is besides the Interface startup file where PI ICU stores the Interface configuration. Generally the identity must have write access to "PIModules" object (see PI SMT -> Security -> Database Security) and to the MDB path where the particular configuration of the Interface is stored (PI SMT -> Operation -> Module Database -> %OSI -> Interfaces -> <InterfaceNodeName> -> <InterfaceInstance>.
All is clear, thanks for your reply Gregor.