# User and Role Management for OPC clients

**URL:** <https://forum.inductiveautomation.com/t/user-and-role-management-for-opc-clients/16143>\
**Category:** Ignition\
**Tags:** ignition79\
**Created:** [November 28, 2017, 8:58am UTC](https://forum.inductiveautomation.com/t/user-and-role-management-for-opc-clients/16143 "2017-11-28T08:58:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nifemi](https://avatars.discourse-cdn.com/v4/letter/n/a5b964/32.png) [@nifemi](https://forum.inductiveautomation.com/u/nifemi)\
**Post date:** [November 28, 2017, 8:58am UTC](https://forum.inductiveautomation.com/t/user-and-role-management-for-opc-clients/16143/1 "2017-11-28T08:58:08Z")

</div>

Good day all,

For anyone who has experience managing roles/users in Ignition - what are the limits of what can be done?

Specificallly, is it possible to use role management to hide certain tags when a user connects using something like UaExpert? I believe read/write access control can be easily achieved, but I havent been able to limit which tags are visible to the client.

Thanks for your help, any tips are welcome.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 28, 2017, 12:45pm UTC](https://forum.inductiveautomation.com/t/user-and-role-management-for-opc-clients/16143/2 "2017-11-28T12:45:18Z")

</div>

The only influence roles can have on the OPC UA server is to make a user read-only. There is no further functionality implemented at this time.