User and Role Management for OPC clients

Good day all,

For anyone who has experience managing roles/users in Ignition - what are the limits of what can be done?

Specificallly, is it possible to use role management to hide certain tags when a user connects using something like UaExpert? I believe read/write access control can be easily achieved, but I havent been able to limit which tags are visible to the client.

Thanks for your help, any tips are welcome.

The only influence roles can have on the OPC UA server is to make a user read-only. There is no further functionality implemented at this time.