# Restrict OPC-UA Clients to Read Only

**URL:** <https://forum.inductiveautomation.com/t/restrict-opc-ua-clients-to-read-only/23469>\
**Category:** Ignition\
**Tags:** ignition79\
**Created:** [March 19, 2019, 10:17pm UTC](https://forum.inductiveautomation.com/t/restrict-opc-ua-clients-to-read-only/23469 "2019-03-19T22:17:53Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 21, 2020, 12:09pm UTC](https://forum.inductiveautomation.com/t/restrict-opc-ua-clients-to-read-only/23469/11 "2020-09-21T12:09:28Z")

</div>

Those tag security changes landed in an 8.0.x release.

What this means is that when accessing _Exposed Tags_ (i.e. tags under the Tag Providers folder, when this feature is enabled) through the server the user the connecting client authenticated with is passed through to the tag system and any security settings on your tags will be applied. The auth profile the server is configured to use and the roles assigned to the user the client authenticates with may start to matter to you.

Tags from configured devices (i.e. tags under the Devices folder) still do not have any access control and likely won’t in the near term.

---

_[View the full topic](https://forum.inductiveautomation.com/t/restrict-opc-ua-clients-to-read-only/23469)._