The restricted global entitlements feature uses tag matching to determine whether a Connection Server instance can access a particular global entitlement.

At the most basic level, tag matching determines that a Connection Server instance that has a specific tag can access a global entitlement that has the same tag.

The absence of tag assignments can also affect whether users that connect to a Connection Server instance can access a global entitlement. For example, Connection Server instances that do not have any tags can only access global entitlements that also do not have any tags.

Table 1 shows how tag matching determines when a Connection Server instance can access a global entitlement.

Table 1. Tag Matching Rules
Connection Server Global Entitlement Access Permitted?
No tags No tags Yes
No tags One or more tags No
One or more tags No tags Yes
One or more tags One or more tags Only when tags match

The restricted global entitlements feature only enforces tag matching. You must design your network topology to force certain clients to connect through a particular Connection Server instance.