# How to determine current Security Zone **URL:** \ **Category:** Ignition\ **Created:** [May 9, 2017, 7:03pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246 "2017-05-09T19:03:12Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![heybales](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/heybales/32/3358_2.png) [@heybales](https://forum.inductiveautomation.com/u/heybales)\ **Post date:** [May 9, 2017, 7:03pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/1 "2017-05-09T19:03:12Z")
Is there any way to determine the current Security Zone from a tag or script? I want to enable/disable buttons based on Security Zone. It seems like this should be a client tag. ---
**Author:** ![cezipper](https://avatars.discourse-cdn.com/v4/letter/c/58956e/32.png) [@cezipper](https://forum.inductiveautomation.com/u/cezipper)\ **Post date:** [June 17, 2017, 3:13pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/2 "2017-06-17T15:13:10Z")
I have the same question. I don’t see a reply to this post. Did you figure out a method? If not, please vote for my feedback on this topic at [http://ideas.inductiveautomation.com/forums/255378-ignition-features-and-ideas/suggestions/19629994-security-zone-client-tag](http://ideas.inductiveautomation.com/forums/255378-ignition-features-and-ideas/suggestions/19629994-security-zone-client-tag) ---
**Author:** ![heybales](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/heybales/32/3358_2.png) [@heybales](https://forum.inductiveautomation.com/u/heybales)\ **Post date:** [June 26, 2017, 6:13pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/3 "2017-06-26T18:13:48Z")
> [@heybales](#): > > I want to enable/disable buttons based on Security Zone. I didn't solve this. Voted for this. @Carl.Gould is this being considered? ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [June 28, 2017, 7:00pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/4 "2017-06-28T19:00:17Z")
Good news! In Ignition 7.9.4, the security zones for the client will be combined with the user’s roles, so that you can use the standard vision security settings for both roles and zones. For example, let’s say you logged in a user with Roles R1 and R2, who was in Zone Z1. They would end up with the following roles: R1 R1@Z1 R2 R2@Z1 ---
**Author:** ![heybales](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/heybales/32/3358_2.png) [@heybales](https://forum.inductiveautomation.com/u/heybales)\ **Post date:** [June 30, 2017, 3:33am UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/5 "2017-06-30T03:33:35Z")
we need a 2-thumbs-up icon for this feature. ---
**Author:** ![nick.schuetz](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nick.schuetz/32/6160_2.png) [@nick.schuetz](https://forum.inductiveautomation.com/u/nick.schuetz)\ **Post date:** [September 4, 2017, 7:03pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/6 "2017-09-04T19:03:59Z")
Was this feature implemented in 7.9.4 and how do we access it? We have not been able to find it. ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [September 26, 2017, 9:59pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/7 "2017-09-26T21:59:47Z")
Yeah, it’s in there, but only for the new client security settings added in 7.9.4 (Project Properties / Client / Permissions) We still need to backport the concept into the component security settings. ---
**Author:** ![boandersen](https://avatars.discourse-cdn.com/v4/letter/b/13edae/32.png) [@boandersen](https://forum.inductiveautomation.com/u/boandersen)\ **Post date:** [June 13, 2018, 1:43pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/8 "2018-06-13T13:43:29Z")
Any developments on this? I was hoping to use Security Zones for a project with strict requirements for inactivity timeout that is based on security zone ---
**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\ **Post date:** [February 10, 2021, 5:08am UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/9 "2021-02-10T05:08:24Z")
@Carl.Gould @paul-griffith > [@Carl.Gould](#): > > For example, let’s say you logged in a user with Roles R1 and R2, who was in Zone Z1. They would end up with the following roles: > > R1 > R1@Z1 > R2 > R2@Z1 Soo.. I hate to revive an old post, but I'm still not seeing this working in 8.1.0? I have a security zone defined and the PC i'm running my Designer on (the gateway) should have this zone, but when I look at the tag `[System]Client/User/RolesString` I see no mention of the security zone I only see the roles themselves that they're been assigned. When I try to use `hasRole('Maintenance@Gateway')` where "Gateway" is my test security zone, I also get a false. As with others here, I want to use the security zones in order to lock functionality out on particular screens if they're not part of a zone, but at the moment I don't see this as being possible (without maybe configuring this security on the tags themselves, but I then there's no indication on the screens as to why they can't write and buttons are still enabled) ---
**Author:** ![gdube](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/gdube/32/41701_2.png) [@gdube](https://forum.inductiveautomation.com/u/gdube)\ **Post date:** [April 26, 2022, 3:42pm UTC](https://forum.inductiveautomation.com/t/how-to-determine-current-security-zone/14246/10 "2022-04-26T15:42:25Z")
Ah, I just had an issue where specifying role@zone in Project Properties \> Vision \> Permissions \> Alarm Management wouldn’t work. I couldn’t acknowledge alarms. Weird because the autocomplete suggestions listed `role@zone` roles as well. In my case, the only zone is `Default`. Executing `system.security.getRoles()` within the Vision context only shows roles without the zone suffix. Edit: I’m on 8.1.15 Edit 2: Could it be related to the auth strategy? ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/2/a23295874db6337a653045845ba0a003b0e6ea0c.png)