# Securing Tags in Tag Browser from Multiple Users

**URL:** <https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [August 29, 2019, 2:24pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878 "2019-08-29T14:24:08Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![karthikeyyans](https://avatars.discourse-cdn.com/v4/letter/k/d78d45/32.png) [@karthikeyyans](https://forum.inductiveautomation.com/u/karthikeyyans)\
**Post date:** [August 29, 2019, 2:24pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/1 "2019-08-29T14:24:08Z")

</div>

Hello,

We have multiple teams accessing Ignition Designer for building custom applications. Is there a way to secure tags in Tag Browser based on teams/role? because Accidental deletion of tags folder by a team affects another team and their application.

Thanks,

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 29, 2019, 3:02pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/2 "2019-08-29T15:02:13Z")

</div>

No, tags are inherently global in the Ignition architecture.

I would strongly suggest using a dedicated virtual machine (or docker container) for each application or group of related applications. Ignition is not truly capable of multi-tenancy. And not just because of global or other shared resources–it is possible from any designer session to completely subvert gateway security.

---

<div class="post-metadata">

**Author:** ![karthikeyyans](https://avatars.discourse-cdn.com/v4/letter/k/d78d45/32.png) [@karthikeyyans](https://forum.inductiveautomation.com/u/karthikeyyans)\
**Post date:** [August 30, 2019, 12:21pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/3 "2019-08-30T12:21:41Z")

</div>

Everything makes sense. Thanks!

---

<div class="post-metadata">

**Author:** ![hewking32](https://avatars.discourse-cdn.com/v4/letter/h/b5ac83/32.png) [@hewking32](https://forum.inductiveautomation.com/u/hewking32)\
**Post date:** [September 22, 2022, 2:02pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/4 "2022-09-22T14:02:12Z")

</div>

> [@pturmel](#):
>
> it is possible from any designer session to completely subvert gateway security.

Yes i am reading your historic posts to learn various things 🙂  
Any chance you comment on the quoted statement please? Have this gaps in security been already closed or do they still exist and maybe you can give a hint on what this gaps are?  
regards

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [September 22, 2022, 2:47pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/5 "2022-09-22T14:47:04Z")

</div>

> [@hewking32](#):
>
> Any chance you comment

No chance.

---

<div class="post-metadata">

**Author:** ![vikan](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/vikan/32/55010_2.png) [@vikan](https://forum.inductiveautomation.com/u/vikan)\
**Post date:** [February 24, 2024, 8:50am UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/6 "2024-02-24T08:50:40Z")

</div>

This has changed with the Ignition CE Multi-Tenant approval. Here are some idea.

 ![Screenshot_20240224_154722_Chrome](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/3/f3c86017502100a4dd45efe71225c964d557c984.jpeg)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 24, 2024, 1:52pm UTC](https://forum.inductiveautomation.com/t/securing-tags-in-tag-browser-from-multiple-users/27878/7 "2024-02-24T13:52:56Z")

</div>

It hasn’t really changed anything. Tags are still global and the Designer still has to be off limits in hosted scenarios.