# Users, Roles and Security Level

**URL:** <https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113>\
**Category:** Ignition\
**Created:** [May 24, 2023, 10:27am UTC](https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113 "2023-05-24T10:27:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Faisal\_Shaikh](https://avatars.discourse-cdn.com/v4/letter/f/3ec8ea/32.png) [@Faisal\_Shaikh](https://forum.inductiveautomation.com/u/Faisal_Shaikh)\
**Post date:** [May 24, 2023, 10:27am UTC](https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113/1 "2023-05-24T10:27:04Z")

</div>

Hi,  
I have created the roles and users in Users and Roles,  
Now I want particular role or user to access a button on the page.

And it will be helpful if anyone can tell the difference between user role and security leve.

Thanks

---

<div class="post-metadata">

**Author:** ![andrew.budaiev](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/andrew.budaiev/32/72921_2.png) [@andrew.budaiev](https://forum.inductiveautomation.com/u/andrew.budaiev)\
**Post date:** [May 24, 2023, 10:40am UTC](https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113/2 "2023-05-24T10:40:26Z")

</div>

> [@Faisal\_Shaikh](#):
>
> And it will be helpful if anyone can tell the difference between user role and security leve.

Security levels is more like a hierarchical structure of access levels which includes User Roles.  
You can learn more if you look at User Manual and/or Inductive University.  
[https://docs.inductiveautomation.com/display/DOC81/Security+Levels](https://docs.inductiveautomation.com/display/DOC81/Security+Levels)  
[https://docs.inductiveautomation.com/display/DOC81/Security+in+Perspective](https://docs.inductiveautomation.com/display/DOC81/Security+in+Perspective)  
And I highly recommend Security Hardening Guide.

> **[Ignition Security Hardening Guide](https://inductiveautomation.com/resources/article/ignition-security-hardening-guide)**
>
> Included in this document are guidelines specifically for the Ignition software, as well as general suggestions regarding the hardware and network where Ignition is installed. The steps provided are recommendations rather than requirements and should...

> [@Faisal\_Shaikh](#):
>
> Now I want particular role or user to access a button on the page.

It depends if it's Vision or Perspective, Inductive University has lessons on component security.

> **[Inductive University Course List - Learn Ignition Free](https://inductiveuniversity.com/courses/ignition/security-in-ignition/8.1)**
>
> Learn the fundamentals and advanced features of Ignition while earning your IU credential

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [May 25, 2023, 11:22am UTC](https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113/3 "2023-05-25T11:22:50Z")

</div>

> [@Faisal\_Shaikh](#):
>
> Now I want particular role or user to access a button on the page.

If your button is simply writing to a tag, I would set the write permissions on the tag itself and read the CanWrite property of the tag to set the enabled condition of the button.

If it's not that simple, then you can set the enabled binding to an expression that uses `isAuthorized` to check if the user has the right security level.

E.g.

```auto
isAuthorized(False, 'Authenticated/Roles/Operator')

```

Personally, I created a prop for each role in the session custom props that hold this, rather than having to write that function each time.  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/3/1351e278220903991547bd9039e7a3b9bda3b509.png)

---

<div class="post-metadata">

**Author:** ![pascal.fragnoud](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pascal.fragnoud/32/24728_2.png) [@pascal.fragnoud](https://forum.inductiveautomation.com/u/pascal.fragnoud)\
**Post date:** [May 25, 2023, 11:37am UTC](https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113/4 "2023-05-25T11:37:55Z")

</div>

Every team should have a wine maker.

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [May 25, 2023, 11:39am UTC](https://forum.inductiveautomation.com/t/users-roles-and-security-level/74113/5 "2023-05-25T11:39:11Z")

</div>

Before the session params, too often it was a "Wind Maker" which isn't so desired 😂