# Can't Create Reference Tag From Remote Tag Provider

**URL:** <https://forum.inductiveautomation.com/t/cant-create-reference-tag-from-remote-tag-provider/93480>\
**Category:** Ignition\
**Created:** [July 19, 2024, 4:24pm UTC](https://forum.inductiveautomation.com/t/cant-create-reference-tag-from-remote-tag-provider/93480 "2024-07-19T16:24:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![edward.fowler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/edward.fowler/32/24179_2.png) [@edward.fowler](https://forum.inductiveautomation.com/u/edward.fowler)\
**Post date:** [July 19, 2024, 4:24pm UTC](https://forum.inductiveautomation.com/t/cant-create-reference-tag-from-remote-tag-provider/93480/1 "2024-07-19T16:24:48Z")

</div>

Gateway B is a remote tag provider for gateway A. When I try to create a tag in gateway A that references a tag in gateway B I get the following error:

> ExecutionException: com.inductiveautomation.ignition.client.gateway\_interface.GatewayException: java.lang.SecurityException: Access Denied. Remote tag editing is not allowed for provider 'default'.  
> caused by GatewayException: java.lang.SecurityException: Access Denied. Remote tag editing is not allowed for provider 'default'.  
> caused by ExecutionException: java.lang.SecurityException: Access Denied. Remote tag editing is not allowed for provider 'default'.

On gateway B settings:

- Service Security has the default settings.
- Service Security ---\> Tag Access = Allow
- Service Security ---\> Default Provider Access Level = ReadOnly

On gateway A reference tag configuration:

- Security ---\> ReadOnly = true

Why does the above exception get thrown, I'm not trying to edit the tag, just read it?

Both servers are running Ignition version is 8.1.42

Thank you.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [July 19, 2024, 4:49pm UTC](https://forum.inductiveautomation.com/t/cant-create-reference-tag-from-remote-tag-provider/93480/2 "2024-07-19T16:49:57Z")

</div>

Reference tags are bidirectional. Use an expression tag.

---

<div class="post-metadata">

**Author:** ![edward.fowler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/edward.fowler/32/24179_2.png) [@edward.fowler](https://forum.inductiveautomation.com/u/edward.fowler)\
**Post date:** [July 19, 2024, 5:40pm UTC](https://forum.inductiveautomation.com/t/cant-create-reference-tag-from-remote-tag-provider/93480/3 "2024-07-19T17:40:31Z")

</div>

Of course, too easy. Thanks Phil.