# Can you limit Perspective access to the app only

**URL:** <https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [February 19, 2025, 4:14pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566 "2025-02-19T16:14:53Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [February 19, 2025, 4:14pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566/1 "2025-02-19T16:14:53Z")

</div>

Is it possible to limit access to a Perspective access to only the app when on mobile? I want to prevent browser access from mobile devices.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\
**Post date:** [February 19, 2025, 4:29pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566/2 "2025-02-19T16:29:27Z")

</div>

I don't think you can. Do you have control over the devices used to run the project? I assume it would need to be implemented at the device level.

---

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [February 19, 2025, 4:34pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566/3 "2025-02-19T16:34:24Z")

</div>

Not direct control. It is a bit of a weird situation due to scope creep. The device id reports **android** or **ios** when using the app but reports **browser** when using a browser.

The problem is I want to allow access from a browser from a normal desktop.

But it seems like Ignition can't differentiate between the browser on a phone and the browser on a desktop without implementing some sort of hostname lookup.

---

<div class="post-metadata">

**Author:** ![Brandon\_Peterson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/brandon_peterson/32/32960_2.png) [@Brandon\_Peterson](https://forum.inductiveautomation.com/u/Brandon_Peterson)\
**Post date:** [February 19, 2025, 4:44pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566/4 "2025-02-19T16:44:54Z")

</div>

Maybe look into the `userAgent` property of the `device` session property?  
[Device Properties​](https://docs.inductiveautomation.com/docs/8.1/ignition-modules/perspective/perspective-sessions/session-properties#device-properties)

---

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [February 19, 2025, 5:07pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566/5 "2025-02-19T17:07:46Z")

</div>

Android Browser

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/1/31a2571556845623077d5aa222eb2486ad3700b6.png)

Desktop Browser

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/d/b/db3203045fa20c84cfbd024fa98d67f677bb6116.png)

I think we can work with this. Thanks for the help.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [February 19, 2025, 6:26pm UTC](https://forum.inductiveautomation.com/t/can-you-limit-perspective-access-to-the-app-only/102566/6 "2025-02-19T18:26:34Z")

</div>

Note that the user agent is not a remotely reliable indicator and can be readily spoofed - it's just an arbitrary string sent by the client.

Fine for obfuscation, _not_ a replacement for actual security.