Remote Tags - Access Denied

Hello, I’m using a remote tag provider for the first time, through the gateway network. I have a client that is providing tags, and connected to my gateway through EAM. My gateway project sees the remote tag provider without issue and can read the tags. However when I try to write to a tag I get an “access denied” error.

Obviously a setting I’m missing somewhere in the configuration, and pointers on where to look? The remote OPC UA server “read only” setting is set to false.

You will need to look at the Service Security and Security Zones pages under the Gateway configuration area. The Tag Access service under Service Security is set to read-only by default.

More reference on the ‘Service Security’ and security zones in general here:
https://docs.inductiveautomation.com/display/DOC79/Security+Zones#SecurityZones-ServiceSecurity