1. Connect the project to the IIoT Services: in the project settings in the group "Network" - "IIoT Services" enable "Activate IIoT-Services.
   
2. Afterwards click on "Configuration settings" and follow the IIoT Services Connection Wizard to complete the configuration
   

Preparing a zenon Project

1. Release each variable that should be available in the Dashboard Service to the IIoT Services. To do so, in your project switch to the "Variables" node and for each variable in group "Authorization/eSignature" - "IIoT Services settings" set "Access permission" to at least "Read-only".
   

In case you want to connect variables coming from Smart Objects, either set the access permission directly in the Smart Object Template or release the property so that the access permission can be set for each variable/Smart Object individually. When you have mapped project variables to a Smart Object, you can make that setting alternatively in the project variable.

Please have in mind: The end user who will interact with the dashboard, will quite likely not know the zenon project in detail. Make his/her life easier by providing additional information beside the variable names, e.g. meaningful identifications and linked equipment groups.

1. Enable Metadata synchronization: in the project settings in the group "Metadata Synchronizer" - "Synchronization to IIoT Services" activate "Enable Synchronization to IIoT-Services Data Modeling".
   

Important: only use the "default" Tenant!

Attention: The Dashboard Service works only if the default tenant is used for the Metadata Synchronizer of the zenon project. That is because the Dashboard Service can read and write information only from the default tenant. So in case you cannot find the projects and variables of your project please make sure that in the Engineering Studio, for the specific project you need, the Metadata Synchronizer properties are filled with the correct info.

1. Synchronize the project to Data Modelling. Open the menu "Tools" and click on "Execute Metadata Synchronizer". After logging in, the task will be performed in the background. Watch the output window for status updates. The synchronization needs to be done after any changes to Variables, Historian and related Metadata like Equipment Modelling etc.
   

Set access rights in Identity Management

1. The user needs rights to access dashboards

1. The user needs rights to access the data the dashboard is showing
   

    Access rights for Dashboard Service

1. In the Identity Management in section "Access control" add the Resource "Dashboard Service" to the respective group.
   
2. Afterwards click on "..." next to the newly added resource and select "Manage roles". Activate the needed role and click on "Submit".
   

Role	View Dashboards	Edit Dashboards	Create/Delete Dashboards	Configure Dashboard Service
Dashboard Viewer	x	-	-	-
Dashboard Editor	x	x	-	-
Dashboard Manager	x	x	x	-
Dashboard Administrator	x	x	x	x

      Access rights for zenon Projects      

1. In the Identity Management in section "Access control" add the Resource "<Your project name>" to the respective group.
   
2. Afterwards click on "..." next to the newly added resource and select "Manage roles". Activate at least "Data Read" and click on "Submit".
   

If your project doesn't show up as resource, it might not be configured for using IIoT Services or it has not yet been started with this configuration in a Service Engine.

Define the entry page

The Dashboard Service is not accessible as a navigation node in the Service Configuration Studio but it is a separate website. By default it opens with the "Dashboard Management page" offering all available dashboards. 

The Dashboard management page can directly be accessed by typing the following URL in the browser: "https://IIoTServiceURL/dashboard/#/config/general" (without quotes)

Example: https://mycomputername.mydomain:9443/dashboard/#/config/general

Andon boards (anonymous access)

      Add a client for the Dashboard Service

1. In Identity Management under "Clients" click "Add" and choose "Custom OAuth 2.0 client" in the popup.
   

            

1. Configure the created client:
1. Define a unique Client ID and Client name
   
2. Set "Grand types" to "ClientCredentials"
   
3. Add the following allowed scopes:
   
1. dashboardAPI
   
2. IdentityApi.read_only
   
3. iiotServicesAPI
   
2. Copy the Secret and save it for later
   

      Add the client to a groups having the required access rights for the Dashboard Service and the projects to be displayed

1. Switch to "Groups" and add a new group "Andon boards"
   
2. Select the created group, select tab "Clients" and click on "Add client". Choose the previously created client.
   
3. Switch to "Access control" and select the previously created group. Click on "Add resources" and add the following resources:
1. Dashboard Service
   
2. Data Modeling
   
3. Your zenon project(s)
   
4. For each of the added resources click on the "..." button and click "Manage roles"
   
1. Dashboard Service: assign role "Dashboard Viewer"
   
2. Data Modeling: assign "Data Modeling Read"
   
3. zenon project(s): assign: "Data Read"
   

IMPORTANT: only assign the minimum needed roles to avoid unintentional changes to the system by an unauthorized user!

      Enable anonymous access in the Dashboard Service

1. The administrative area of the Dashboard Service can be accessed using the "Gear" icon in the top right corner of the application.
   
2. When you are logged in with a user having the role "Dashboard Administrator", next to "Dashboard Management" the section "General settings" is available. This page can also be directly accessed by typing the following URL in the browser "https://DashboardServiceURL/config/general" (without quotes)
   

1. In section "Enable access to dashboards without login" enter the Client ID and Client Secret as defined in Identity Management and click on "Test & Enable". The connection will be tested and applied if the test was successful.