In this guide, we take a look at how to hide the equipment hierarchy from users, leaving only a portion of it visible.

Consider the following equipment hierarchy:

Let's say we'd like to hide everything else except Example site 1 from user Operator. There are two things we need to do:

1. Add permission which hides all the equipment instances from the user.
2. Add more specific permission that allows the user to see Example site 1.

Hiding all the equipment instances

First we open our Engineering UI. Locally on the server the Engineering UI can be accessed by navigating on a web browser to https://localhost/history

1. From the left-side navigation, open Information Model > Database Classes window.
2. From the Class dropdown at the top, select UI Access Control List Entry.
3. Click Edit at the bottom.
4. Click New at the bottom.
5. Set Object reference to /Path*.
6. Set Group or user to \Operator.
7. Set Deny to Read.
8. Click Commit at the bottom.
9. Click OK in the commit dialog.

Displaying the specific site

1. Go to the Time Series window from the left-side navigation.
2. Right-click Example site 1 in the hierarchy to open the context menu and select Security.

3. In the security editor that opens, check the Read (eye icon) checkbox under Allow.
4. Click OK.

If we now log in as Operator, we can see that only Example site 1 is visible in the equipment hierarchy: