# Security Settings Combination in Perspective

**URL:** <https://forum.inductiveautomation.com/t/security-settings-combination-in-perspective/40314>\
**Category:** Ignition Early Access\
**Created:** [November 4, 2020, 9:12pm UTC](https://forum.inductiveautomation.com/t/security-settings-combination-in-perspective/40314 "2020-11-04T21:12:41Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![cmallonee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmallonee/32/6416_2.png) [@cmallonee](https://forum.inductiveautomation.com/u/cmallonee)\
**Post date:** [January 11, 2023, 3:03am UTC](https://forum.inductiveautomation.com/t/security-settings-combination-in-perspective/40314/4 "2023-01-11T03:03:18Z")

</div>

> [@Bart.van.Deurzen](#):
>
> Otherwise, any login would defeat the need for the zone, thereby making the zone useless.

This isn't true. I can make a Security Zone named "Plant" based strictly on IP to restrict access to a subnet of my organization. I can also make a Security Level for my Operators, where I dictate any user from my facility receive that Security Level.

With these two potential requirements in place, ready to use, and applied as requirements, there are two different potentialities - both of which are valid and have realistic use-cases:

- **All of** : Someone from my facility must be logged in AND must be on a machine which is part of the local subnet.
- **Any of** : Someone from my facility must be logged in (but they could be located off-site - like a remote worker) OR any machine from the local subnet could have access - even if no user is logged in.

Now, maybe this doesn't suit all needs. Suppose I want to allow all logged in facility workers but I want to require they be on-site, AND I want to allow Management, who might not be on-site. At this point you just need to create a Security Level called something like "On-Site Operator" where that Security Level is a combination of the rules you created for Operator and the Security Zone. Then you can specify the Security Settings for the component as requiring "any of" the "On-Site Operator" or "Management" Security Levels.

---

_[View the full topic](https://forum.inductiveautomation.com/t/security-settings-combination-in-perspective/40314)._
