# Perspective Application - Limiting Access **URL:** \ **Category:** Ignition\ **Tags:** perspective\ **Created:** [March 8, 2024, 8:27pm UTC](https://forum.inductiveautomation.com/t/perspective-application-limiting-access/87066 "2024-03-08T20:27:08Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![tim.schultz](https://avatars.discourse-cdn.com/v4/letter/t/71e660/32.png) [@tim.schultz](https://forum.inductiveautomation.com/u/tim.schultz)\ **Post date:** [March 8, 2024, 8:27pm UTC](https://forum.inductiveautomation.com/t/perspective-application-limiting-access/87066/1 "2024-03-08T20:27:08Z")
We typically limit access to certain Perspective applications via two different methods: - Source IP - Authenticated + Authorized User We had a situation come up yesterday in which the plant want to do both. Functionally they will either use this application from dedicated End-Of-Line clients, or log in to it from anywhere if they have appropriate authorization. What is the best way to accomplish this? Is there a way to require authentication only if they're not in a Security Zone? ---
**Author:** ![cmallonee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmallonee/32/6416_2.png) [@cmallonee](https://forum.inductiveautomation.com/u/cmallonee)\ **Post date:** [March 8, 2024, 10:22pm UTC](https://forum.inductiveautomation.com/t/perspective-application-limiting-access/87066/2 "2024-03-08T22:22:24Z")
Perspective Permissions allow for specifying that users may belong to either ALL specified Security Levels, or ANY of the specified Security Levels. In your scenario, you would want to specify a Security Level which is defined by a Security Zone (which itself is defined by some IP or subnet). Then, when defining permissions as part of Project Properties, select both `Authenticated` and your new Security Level, and select `At least one of the security levels of the user must match any of the required security levels`