TN - 1502 AVEVA PI Vision Security Configuration

Description

This article from InSource shows how to configure security for AVEVA PI Vision.

• Author: Rich Brooks
• Published: 6/4/2026
• Applies to: AVEVA PI Vision 2024 and higher

Details

Security for PI Vision is configured from the Admin web page.  Navigate to the following URL:

https://<server name>/PIVision/Admin

Select Security from the menu in the left pane.

Select the Identity AF Server from the drop down list or type it in.  Leave the default Windows only option for PI Vision user authentication.  Click on the save button.  

Note:  OpenID Connect is beyond the scope of this tech note.

Click on the User Access Levels tab.  There is no need to configure anything here unless PI AF Identities are needed to limit access.

Open Computer Management using the Windows search bar.  There are three Windows Local Groups for providing access to PI Vision.  Add users to the following groups as required:

PI Vision Admins - Can modify administration settings.

PI Vision Users - Can view, create, save, and share displays.

PI Vision Utility Users - Permission to run display utility tools and REST APIs.

Select the Calculations tab.  This tab is used to limit access to calculations.  It is set to Allow everyone to create, edit, and execute calculations in this example. Click on the Save button to save any changes.

Select the Navigation Links tab.  This tab is used to limit access to navigation links.  It is set to Disallow all external navigation links in this example.  Click on the Save button to save any changes.