# OPC UA client with read only access

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-client-with-read-only-access/58212>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [April 8, 2022, 10:56am UTC](https://forum.inductiveautomation.com/t/opc-ua-client-with-read-only-access/58212 "2022-04-08T10:56:59Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![SamuelsenLarsen](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/samuelsenlarsen/32/11901_2.png) [@SamuelsenLarsen](https://forum.inductiveautomation.com/u/SamuelsenLarsen)\
**Post date:** [April 8, 2022, 10:56am UTC](https://forum.inductiveautomation.com/t/opc-ua-client-with-read-only-access/58212/1 "2022-04-08T10:56:59Z")

</div>

Hi,  
Is i t possible to grant external OPC UA clients read only access to the Ignition GW OPC UA server.

Mvh Stian

---

<div class="post-metadata">

**Author:** ![mazeyrat](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mazeyrat/32/10955_2.png) [@mazeyrat](https://forum.inductiveautomation.com/u/mazeyrat)\
**Post date:** [April 8, 2022, 11:03am UTC](https://forum.inductiveautomation.com/t/opc-ua-client-with-read-only-access/58212/2 "2022-04-08T11:03:18Z")

</div>

You can probably set **Write Permissions** on tag, and use a user without the **Write Permissions** to connect to the exposed tags from the opcua server.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/f/afd6069001fafeb78df36363b75ac8ad2a518ba7.png)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [April 8, 2022, 11:52am UTC](https://forum.inductiveautomation.com/t/opc-ua-client-with-read-only-access/58212/3 "2022-04-08T11:52:32Z")

</div>

I vaguely recall that v8+ doesn’t / didn’t honor read-only OPC users. @Kevin.Herron ?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [April 8, 2022, 1:07pm UTC](https://forum.inductiveautomation.com/t/opc-ua-client-with-read-only-access/58212/4 "2022-04-08T13:07:09Z")

</div>

The permissions of the connected user will be taken into consideration when accessing Exposed Tags, but not for the devices themselves, unfortunately.