Security Zones, Levels, Roles, and Perspective View Permissions

Ignition
,
1

My end goal is to restrict View Permissions to certain IdP roles in certain Security Zones. I have created custom Security Levels to match up with IdP roles. The intuitive way to do that is configuring these View Permissions:

image
image1464×1144 144 KB

I think my problem is that although these role-based Security Levels do seem to be granted to users on login:

  • Authenticated/Roles/Administrator
  • Authenticated/Roles/Operator

the zone-specific levels (e.g., Authenticated/Roles/Administrator/Zone 1) are not automatically granted. I have read these articles in the user manual:

It seems I cannot create custom Security Level Rules for the zone-specific levels under each role either:

image
image1072×800 10.4 KB

How do I get these security levels granted when a user satisfies both the role and zone conditions? Is there a better way to do this?

2

In your posted first image, check "The security levels... must match all of the required security levels".

3

(post deleted by author)

4

My security zones are mutually exclusive, so it is not possible to be client in more than one. That is why I have the 'any' option selected.

5

You'll need to create some levels that represent you "zone groups", I guess.