4 PI Users
The Users tab of the PI Administration screen enables you to add new PI users and to edit and delete existing PI users.
When you add a new PI user you select the service providers to associate with the user. The PI user can run PI commands only for those service providers. This allows you to restrict the data that the PI user can query or modify through the PI. The PI returns a NACK if a PI user attempts to run a PI command for a service provider that they are not associated with.
In addition, you specify the connection details and security level of the PI user. The first command sent to the PI by the PI user will be a connect command, specifying the username and password. PI users can access only those commands that have a security level less than or equal to their security level. Users can use only the MAC pair specified in their profile and are restricted to using the port specified on the screen.
Users fields
The following table describes the function of each field in the PI Users screen.
| Field | Description |
|---|---|
| User |
The unique username for this user. Note: This field cannot be changed after it is first saved. |
| Enter Password | Sets the password for this PI user. |
| Confirm Password | Confirms the user's password. |
| Security Level | The security level for this user. Specify a value between 1 and 99 (inclusive) The user will be able to run PI commands with security levels equal to or lower than this number. |
| Allow CCSVR1 Private Secret Decryption | Permission for the user to decrypt voucher private secret to obtain HRN. |
| Port Number | The port number this user can connect from. |
| MAC Pair | The MAC pair this user can connect from. MAC pairs are the security keys to encode and decode encrypted data. |
| Currency | The reporting currency for this user. |
| Last Password Change | Date of the last successful password change for this PI User. |
| Failed Logins | The number of login failures since the last successful login. |
| Lock Reason |
Displays the reason that a user has been locked out of the system. You can unlock a locked PI user by clearing this field. If a user fails to log in to the system in three successive attempts, the system locks the account and the following text is displayed: For more information about locked accounts, see Unlocking locked PI users. Warning: When you create a user, leave this field blank to avoid creating a locked account. |
| Available Service Providers | The list of service providers that you can associate with this user. |
| Associated Service Providers | The list of service providers associated with this user. For PI commands that allow a service provider to be specified, the data that this user can update or query through the PI is restricted to data that is managed by a service provider in this list. |
Adding PI users
Follow these steps to add a new PI user.
-
On the Users tab, click New.
Result: The PI Users screen appears. See Users fields for a description of each field.
-
In the User field, type a unique username for the PI user you want to add.
-
In the Enter Password field, type the user's password.
-
In the Confirm Password field, retype the user's password to confirm.
-
In the Security Level field, type the command security level for this user. Specify a value between 1 and 99 (inclusive). The user will be able to run PI commands with security levels equal to or lower than this number.
-
From the Port Number list, select the port the user can connect from. To allow the user to connect from any port, select
Any. -
From the MAC Pair list, select the MAC pair the user will connect from.
-
From the Currency list, select the reporting currency for the user.
-
Add the service providers the PI user will be able to run PI commands for to the list of associated service providers:
-
To add a service provider to the list, select the service provider in the Available Service Providers box and click Add.
-
To remove a service provider from the list, select the service provider in the Associated Service Providers box and click Remove.
-
-
Click Save.
Result: The new user details are saved in the database.
Related topic
Editing PI users
Follow these steps to edit the details of a PI user.
-
From the list of PI users on the Users tab, select the user whose details you want to edit.
-
Click Edit.
Result: The PI Users screen is populated with the data from the selected user record. See Users fields for a description of each field.
-
Change the user details as required.
-
Click Save.
Result: The details are saved to the database.
Related topic
Deleting PI users
Follow these steps to delete a PI user.
-
From the list of PI users on the Users tab, select the user you want to delete.
-
Click Delete.
Result: The Delete Confirmation dialog box appears.
-
Click OK.
Result: The PI user is removed from the database.
-
Soft restart the PI. For details, see Soft PI Restart in PI User's and Technical Guide.
Result: The updated configuration details will be loaded by the PImanager.
Related topic
Unlocking locked PI users
PI users could be locked for the following reasons:
-
By using an incorrect user name or password combination in three successive attempts.
-
When their account has expired.
When an account is locked for any reason, the Lock Reason field in the PI Users screen displays the reason.
You can unlock locked PI users by resetting the password or clearing the Lock Reason field.
Follow these steps to unlock a locked PI user's account by resetting the password:
-
From the list of PI users on the Users tab, select the user account you want to unlock.
-
Click Edit.
Result: The PI Users screen is populated with the data from the selected user record. See Users fields for a description of each field.
-
Specify a new password for the PI user.
Note:
Ensure that the new password you specify complies with the configured password policy. -
Click Save.
Result: The new password is saved and the PI user account is unlocked.
Related topic