It can get a little confusing if you start configuring Ignition Tag permissions because the OPC UA server uses a different authentication profile by default, though I'm not sure it actually matters in this case.
I'm evaluating some Ignition features for a client. We would like to perform supervisory control functions using python against the Ignition OPCUA server, which will provide access our ModBUS (and potentially CAN) devices. Might run it all on a Revolution Pi or some such.