The restricted global entitlements feature uses tag matching to determine whether a Connection Server instance can access a particular global entitlement.
At the most basic level, tag matching determines that a Connection Server instance that has a specific tag can access a global entitlement that has the same tag.
The absence of tag assignments can also affect whether users that connect to a Connection Server instance can access a global entitlement. For example, Connection Server instances that do not have any tags can only access global entitlements that also do not have any tags.
Table 1 shows how tag matching determines when a Connection Server instance can access a global entitlement.
|Connection Server||Global Entitlement||Access Permitted?|
|No tags||No tags||Yes|
|No tags||One or more tags||No|
|One or more tags||No tags||Yes|
|One or more tags||One or more tags||Only when tags match|
The restricted global entitlements feature only enforces tag matching. You must design your network topology to force certain clients to connect through a particular Connection Server instance.