The restricted global entitlements feature uses tag matching to determine whether a Connection Server instance can access a particular global entitlement.

At the most basic level, tag matching determines that a Connection Server instance that has a specific tag can access a global entitlement that has the same tag.

The absence of tag assignments can also affect whether users that connect to a Connection Server instance can access a global entitlement. For example, Connection Server instances that do not have any tags can only access global entitlements that also do not have any tags.

1 shows how tag matching determines when a Connection Server instance can access a global entitlement.

Table 1. Tag Matching Rules

Connection Server

Global Entitlement

Access Permitted?

No tags

No tags

Yes

No tags

One or more tags

No

One or more tags

No tags

Yes

One or more tags

One or more tags

Only when tags match

The restricted global entitlements feature only enforces tag matching. You must design your network topology to force certain clients to connect through a particular Connection Server instance.