How do I assign and restrict access to PI Vision 2023 on a single DB

Hi all,

I needed to assign access to a contractor, who has an AD account on our company's domain, to view a single dashboard on one of our sites. The site has its own DA and AF server, and PI Vision 2023 is installed.

1. In the system explorer, I created a new identity called "Contractors" and mapped it to the Contractor's AD account
2. In the PI Vision Admin. Portal, I selected the identity and assigned Explorer rights as per image below.
3. In PI Vision, I navigated to the dashboard and assigned the Contractor identity read access only.

Are those steps correct?

Is this sufficient/correct for read-only access?

Is there a way to contain the contractor's access to only view this dashboard. I believe this is possible in the latest version of PI Vision, but could be wrong.

Any assistance will be appreciated, thanks.