# Ignition 8.1 OPC UA Hiding system tags from OPC UA clients **URL:** \ **Category:** Ignition\ **Tags:** opcua, ignition81\ **Created:** [July 16, 2024, 2:30pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289 "2024-07-16T14:30:40Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Muhammad\_Hassan](https://avatars.discourse-cdn.com/v4/letter/m/ce7236/32.png) [@Muhammad\_Hassan](https://forum.inductiveautomation.com/u/Muhammad_Hassan)\ **Post date:** [July 16, 2024, 2:30pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/1 "2024-07-16T14:30:40Z")
After connecting a local UAExpert to an SBX Ignition environment, The clients have read access to these two system tag folders/providers: ![ignopc2](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/6/f6003f1e898b740d4633c55166fa997ee887f349.png) ![igopc](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/9/396d333ffe1ad215189f17e3aeab6829915041f6.png) Is there a way to hide these two folders/providers from connected clients? Obviously, you can hide the read access from the created tag provided, but these two default system tags seem to have an option for that. Using Ignition 8.1.38 (Linux) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 16, 2024, 2:33pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/2 "2024-07-16T14:33:16Z")
No, Exposed Tags is pretty much all or nothing right now. In 8.3 we've added role-based access controls and the ability to hide/show things at the provider level, but even then your system tags would still be accessible if the provider was accessible to that user. ---
**Author:** ![Muhammad\_Hassan](https://avatars.discourse-cdn.com/v4/letter/m/ce7236/32.png) [@Muhammad\_Hassan](https://forum.inductiveautomation.com/u/Muhammad_Hassan)\ **Post date:** [July 16, 2024, 3:04pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/3 "2024-07-16T15:04:52Z")
So, we can't hide either the system or server tag folders in the current Ignition versions? even if we want to just disable it for all users? When referring to 8.3, which Ignition version is that? Is that separate from the 8.1 updates? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 16, 2024, 3:11pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/4 "2024-07-16T15:11:31Z")
You can disable the Exposed Tags feature, which removes the entire Tag Providers folder. No further granularity. The Server object is a standard OPC UA object that is present in every server. Its visibility will never be modifiable. 8.3 is the next major release of Ignition and is currently under development. It won't be available until early next year. ---
**Author:** ![Muhammad\_Hassan](https://avatars.discourse-cdn.com/v4/letter/m/ce7236/32.png) [@Muhammad\_Hassan](https://forum.inductiveautomation.com/u/Muhammad_Hassan)\ **Post date:** [July 16, 2024, 3:15pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/5 "2024-07-16T15:15:06Z")
The System and Server both only read access by default, correct? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 16, 2024, 3:15pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/6 "2024-07-16T15:15:38Z")
By default and there's no possibility to configure it otherwise. edit: there might actually be one writable tag inside the Server hierarchy somewhere, to enable and disable the OPC UA diagnostics within the server. ---
**Author:** ![Muhammad\_Hassan](https://avatars.discourse-cdn.com/v4/letter/m/ce7236/32.png) [@Muhammad\_Hassan](https://forum.inductiveautomation.com/u/Muhammad_Hassan)\ **Post date:** [July 16, 2024, 3:24pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/7 "2024-07-16T15:24:31Z")
Would love to know more about that tag if it exists. I also found this in the Service Security under the Security tab: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/f/3f2482ff88e2b51860dae54f4ca3516137513643.png) Could it be used to disable the system tag folder? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 16, 2024, 3:27pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/8 "2024-07-16T15:27:37Z")
No, none of that configuration is relevant to the OPC UA server. ---
**Author:** ![Muhammad\_Hassan](https://avatars.discourse-cdn.com/v4/letter/m/ce7236/32.png) [@Muhammad\_Hassan](https://forum.inductiveautomation.com/u/Muhammad_Hassan)\ **Post date:** [July 16, 2024, 3:42pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/9 "2024-07-16T15:42:40Z")
Is there any confirmation on the writeable tag that could disable the OPC UA diagnostics? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [July 16, 2024, 3:49pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-opc-ua-hiding-system-tags-from-opc-ua-clients/93289/10 "2024-07-16T15:49:24Z")
Yes it exists and is writable. Diagnostics are meant to be turned on or off by clients as needed. They are off by default. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/e/3/e36bda9792979f4c94921191040e5ff7179fc5f0.png)