# Error saving tag changes to a Remote Tag Provider

**URL:** <https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116>\
**Category:** Module Development\
**Created:** [May 25, 2021, 10:51pm UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116 "2021-05-25T22:51:29Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![dpitzer](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@dpitzer](https://forum.inductiveautomation.com/u/dpitzer)\
**Post date:** [May 25, 2021, 10:51pm UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/1 "2021-05-25T22:51:29Z")

</div>

I have Managed Tag provider running a Remote Gateway. I have have enabled setAllowTagCustomization on the provider. And I am able to modify tags inside that Tag Provider while I am accessing them from that Gateway’s designer.  
On a different gateway, I have a Remote Tag provider set up to reference this same Managed Tag provider. I also set the Security Zone rules on the Remote Gateway to allow read/write of tags between this gateway and the remote gateway.  
However, When I try to make a tag modification to the Remote Tag provider from the second gateway, I get the following access denied error.

```auto
ExecutionException: com.inductiveautomation.ignition.client.gateway_interface.GatewayException: java.lang.SecurityException: Access Denied. Remote tag editing is not allowed for provider 'myManagedTagProvider'.
	caused by GatewayException: java.lang.SecurityException: Access Denied. Remote tag editing is not allowed for provider 'myManagedTagProvider'.
	caused by ExecutionException: java.lang.SecurityException: Access Denied. Remote tag editing is not allowed for provider 'myManagedTagProvider'.

Ignition v8.1.2 (b2021020311)
Java: Azul Systems, Inc. 11.0.9

```

Here is Java that sets up the Managed Tag provider.

```auto
    private ManagedTagProvider createManagedTagProvider(String newProviderName) {
        ProviderConfiguration config = new ProviderConfiguration(newProviderName);

        config.setAllowTagCustomization(true);
        config.setPersistTags(true);
        config.setPersistValues(true);

        ManagedTagProvider newProvider = this.context.getTagManager().getOrCreateManagedProvider(config);

        newProvider.registerWriteHandler(null, (TagPath target, Object value) -> {
            if (isProtectedTag(target)) {
                return QualityCode.Bad_AccessDenied;
            }

            return Send(target, value);
        });

        return newProvider;
    }

```

Any ideas what I might be missing here?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [May 26, 2021, 2:37pm UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/2 "2021-05-26T14:37:23Z")

</div>

> [@dpitzer](#):
>
> I also set the Security Zone rules on the Remote Gateway to allow read/write of tags between this gateway and the remote gateway.

Read/write? Or Read/Write/Edit? There's a distinct permission for the latter.

---

<div class="post-metadata">

**Author:** ![dpitzer](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@dpitzer](https://forum.inductiveautomation.com/u/dpitzer)\
**Post date:** [May 26, 2021, 7:48pm UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/3 "2021-05-26T19:48:22Z")

</div>

That was it! I selected Read/Write in my Service Security settings instead of Read/Write/Edit. Thanks!

---

<div class="post-metadata">

**Author:** ![kaushik.shah](https://avatars.discourse-cdn.com/v4/letter/k/34f0e0/32.png) [@kaushik.shah](https://forum.inductiveautomation.com/u/kaushik.shah)\
**Post date:** [September 20, 2023, 8:10pm UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/4 "2023-09-20T20:10:34Z")

</div>

hi @dpitzer ,

What type of modifications can you make on your provider? I am trying to add a folder on the provider through designer but it would give me access denied error.

I am new on playing with managed tag provider and would appreciate the comment.

Thanks,

---

<div class="post-metadata">

**Author:** ![Ivan\_H](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ivan_h/32/28186_2.png) [@Ivan\_H](https://forum.inductiveautomation.com/u/Ivan_H)\
**Post date:** [November 2, 2024, 3:50am UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/5 "2024-11-02T03:50:55Z")

</div>

> [@paul-griffith](#):
>
> Read/Write/Edit

Can the tags be Read/Write/Edit on a Igniton Edge gw, from a Ignition Full gw?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [November 4, 2024, 4:04pm UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/6 "2024-11-04T16:04:45Z")

</div>

As far as I know the answer to that is yes.

---

<div class="post-metadata">

**Author:** ![Ivan\_H](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ivan_h/32/28186_2.png) [@Ivan\_H](https://forum.inductiveautomation.com/u/Ivan_H)\
**Post date:** [November 6, 2024, 12:25am UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/7 "2024-11-06T00:25:24Z")

</div>

When I tried accessing the remote (central) tag provider from Edge, it wasn’t visible. However, from the central (full) Ignition gateway, I was able to view and create tags on the Edge tag provider, but I encountered the error: _Bad\_NotFound("Unknown provider. [CPW\_Snowflake]")_.

Considering that Edge only supports one tag provider, what is the correct method for transferring tags from a central/full Ignition gateway to an Edge gateway?

---

<div class="post-metadata">

**Author:** ![rickard.eriksson](https://avatars.discourse-cdn.com/v4/letter/r/7cd45c/32.png) [@rickard.eriksson](https://forum.inductiveautomation.com/u/rickard.eriksson)\
**Post date:** [March 3, 2026, 5:43am UTC](https://forum.inductiveautomation.com/t/error-saving-tag-changes-to-a-remote-tag-provider/47116/8 "2026-03-03T05:43:58Z")

</div>

Hi!

Does anyone know where i can find this setting in 8.3.3?