# Restrict a device's access to Perspective projects **URL:** \ **Category:** Ignition\ **Tags:** ignition81, perspective\ **Created:** [August 18, 2022, 12:54am UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124 "2022-08-18T00:54:07Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Billy\_Grigo](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@Billy\_Grigo](https://forum.inductiveautomation.com/u/Billy_Grigo)\ **Post date:** [August 18, 2022, 12:54am UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/1 "2022-08-18T00:54:07Z")
Hi all, Using Perspective, Ignition 8.1 We have a project to add a pre-startup checklist to a few machines on our production lines. I have built out the checklist, and am 100% happy with it in its current state. These are going to be displayed on some iPads which will be locked to just the perspective app. The question of this thread is: Is there a way to, restrict which projects a device can access, without requiring a login? As it stands, any of the iPads can load any perspective project (some of which are password protected), but this is undesirable. Any means of restricting based on MAC address (or IMEI, or some secret code word, or anything else), such that it can all be done automatically, would be great. Thanks in advance! ---
**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\ **Post date:** [August 18, 2022, 11:26am UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/2 "2022-08-18T11:26:37Z")
Take a look at Security Zones. [https://docs.inductiveautomation.com/display/DOC81/Security+Zones](https://docs.inductiveautomation.com/display/DOC81/Security+Zones) ---
**Author:** ![Billy\_Grigo](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@Billy\_Grigo](https://forum.inductiveautomation.com/u/Billy_Grigo)\ **Post date:** [August 19, 2022, 4:15am UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/3 "2022-08-19T04:15:46Z")
This does seem to be the ticket! I’ve created a Security Zone for each of my iPads, which use the hostname to identify. I’m struggling to figure out how to set the Security Zone to apply for my projects - I’ve added it to the session props for one project and it doesn’t seem to work. I’m probably missing something, but I will keep trying! Further advice would be appreciated! I’m also a little bit confused as to exactly which policy settings would prevent a perspective client from launching a project entirely. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/f/8f5119a7c6c783e2a90d3bf999cd3457f6e31996.png) ---
**Author:** ![Billy\_Grigo](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@Billy\_Grigo](https://forum.inductiveautomation.com/u/Billy_Grigo)\ **Post date:** [August 19, 2022, 5:03am UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/4 "2022-08-19T05:03:03Z")
Update, I have figured it out. In designer, Project \> Project Properties \> Perspective \> Permissions. One last issue I’m having is that it is not working with the host name, only when I put in an IP. This is an iPad bear in mind, so the “hostname” doesn’t technically exist, but is rather called a “client ID”, unless I am missing something. Edit: just tested using the hostname of my PC and it doesn’t seem to work with that either (unless the hostname is something other than what is given by cmd `hostname` ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [August 19, 2022, 12:14pm UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/5 "2022-08-19T12:14:43Z")
Perspective can only use a hostname if your DNS system can do reverse lookups on the IP addresses of your clients. { Prepare to be disappointed at Perspective’s lack of ability to definitively and reliably identify client machines. The “deviceID” is the closest you’ll get, and only in the app or workstation. } ---
**Author:** ![Billy\_Grigo](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@Billy\_Grigo](https://forum.inductiveautomation.com/u/Billy_Grigo)\ **Post date:** [August 20, 2022, 1:48am UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/6 "2022-08-20T01:48:26Z")
It seems like IP will have to do then, I’ll just have to reserve some IPs and set them statically in the iPads. Not a big deal! Thanks for the reply ---
**Author:** ![Billy\_Grigo](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@Billy\_Grigo](https://forum.inductiveautomation.com/u/Billy_Grigo)\ **Post date:** [September 1, 2022, 5:35pm UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/7 "2022-09-01T17:35:47Z")
> Perspective can only use a hostname if your DNS system can do reverse lookups on the IP addresses of your clients. So I've been tinkering a bit more trying to get this to work with a hostname as it would be much nicer than statically reserving a pile of IP's. My IT admin has added my PC and android phone to both forward and reverse lookup lists for his DNS server, and I can ping using the hostname `ping ` and it resolves correctly for both devices, from several different devices. Perspective still will not resolve the hostname however. This is all on our LAN as well. Any other advice would be appreciated! ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 1, 2022, 5:36pm UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/8 "2022-09-01T17:36:49Z")
Is “Resolve Client Hostnames” enabled? [https://docs.inductiveautomation.com/display/DOC81/Web+Server+Settings](https://docs.inductiveautomation.com/display/DOC81/Web+Server+Settings) ---
**Author:** ![Billy\_Grigo](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@Billy\_Grigo](https://forum.inductiveautomation.com/u/Billy_Grigo)\ **Post date:** [September 1, 2022, 8:58pm UTC](https://forum.inductiveautomation.com/t/restrict-a-devices-access-to-perspective-projects/63124/9 "2022-09-01T20:58:56Z")
Thanks for point this out, I missed that setting! To add on for any future visitors, with this setting enabled I _still_ had some trouble connecting via my PC. My phone worked just fine with \, but what ended up working for my PC was to qualify it with the full domain \.