# How do I check what security zone a client belongs to?

**URL:** <https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [February 12, 2021, 6:13am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347 "2021-02-12T06:13:48Z")\
**Posts on this page:** 8\
**Page:** 2

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [January 20, 2023, 12:58am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/21 "2023-01-20T00:58:20Z")

</div>

This is Ignition configuration, nothing to do with your IdP.

Your Security Levels config should look something like this, if "Supervisor" is indeed a user role. The "SecurityZones" underneath the role is automatically added based on what is defined beneath this in the `Public/Authenticated/SecurityZones` folder  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/e/ae0a214f00c7c62c66b283df18fd1f06d6c972d2.png)

In this instance, I have user roles Administrator, Developer, and Maintenance. And I've added them (manually) into the Roles folder in the Security Levels. Then when users log in that have any of these roles defined in their user profiles, they will automatically then be granted that role's security level.

I'm still not entirely sure why the roles aren't automatically added based on your user source roles, but my assumption is that you could have any number of user sources all with different roles, so it doesn't make sense to pull these all in.

---

<div class="post-metadata">

**Author:** ![CTrenkamp](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ctrenkamp/32/38440_2.png) [@CTrenkamp](https://forum.inductiveautomation.com/u/CTrenkamp)\
**Post date:** [January 20, 2023, 1:01am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/22 "2023-01-20T01:01:51Z")

</div>

So this worked for the user. Still not getting the InPlant to work and my IP address from Session props comes up [0:0:0:0:0:0:0:1] when I display it on the view. But even if I use the asterisk for all 4 numbers with periods it doesn't work.

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [January 20, 2023, 1:06am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/23 "2023-01-20T01:06:22Z")

</div>

> [@CTrenkamp](#):
>
> Session props comes up [0:0:0:0:0:0:0:1]

I assume this has something to do with your network, but I'd be guessing if I tried to diagnose it. It'd be useful for someone else who has more experience in this to know more about your network though.

---

<div class="post-metadata">

**Author:** ![CTrenkamp](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ctrenkamp/32/38440_2.png) [@CTrenkamp](https://forum.inductiveautomation.com/u/CTrenkamp)\
**Post date:** [January 20, 2023, 1:07am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/24 "2023-01-20T01:07:59Z")

</div>

I also just noticed that when I moved 'Supervisor' under Roles it populated the Security Zones under it for some reason. I did not tell it to do that.  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/2/3/23b58cf6555973f87bf0073892da6926e562cbe2.png)

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [January 20, 2023, 1:09am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/25 "2023-01-20T01:09:20Z")

</div>

> [@CTrenkamp](#):
>
> Roles it populated the Security Zones under it

Correct. This is automatically populated and allows you to allow components to require a role along with a security zone(s) for access

---

<div class="post-metadata">

**Author:** ![CTrenkamp](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ctrenkamp/32/38440_2.png) [@CTrenkamp](https://forum.inductiveautomation.com/u/CTrenkamp)\
**Post date:** [January 20, 2023, 1:10am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/26 "2023-01-20T01:10:47Z")

</div>

👍

---

<div class="post-metadata">

**Author:** ![CTrenkamp](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ctrenkamp/32/38440_2.png) [@CTrenkamp](https://forum.inductiveautomation.com/u/CTrenkamp)\
**Post date:** [January 20, 2023, 1:11am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/27 "2023-01-20T01:11:44Z")

</div>

For now I am trying it on an install on my laptop before I move forward.

---

<div class="post-metadata">

**Author:** ![CTrenkamp](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ctrenkamp/32/38440_2.png) [@CTrenkamp](https://forum.inductiveautomation.com/u/CTrenkamp)\
**Post date:** [January 20, 2023, 1:37am UTC](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347/28 "2023-01-20T01:37:03Z")

</div>

I was able to finally get it working. Thanks for everyone's help.

[Previous page](https://forum.inductiveautomation.com/t/how-do-i-check-what-security-zone-a-client-belongs-to/43347.md?page=1)
