Skip to main content

July 27, 2026

Tag Matching and Global Entitlements in Horizon 8

The Connection Server restrictions feature uses tag matching to determine whether a Connection Server instance can access a particular global entitlement.

At the most basic level, tag matching determines that a Connection Server instance that has a specific tag can access a global entitlement that has the same tag.

The absence of tag assignments can also affect whether users that connect to a Connection Server instance can access a global entitlement. For example, Connection Server instances that do not have any tags can only access global entitlements that also do not have any tags.

The following table shows how tag matching determines when a Connection Server instance can access a global entitlement.

Tag Matching Rules
Connection ServerGlobal EntitlementAccess Permitted?
No tagsNo tagsYes
No tagsOne or more tagsNo
One or more tagsNo tagsYes
One or more tagsOne or more tagsOnly when tags match

The Connection Server restrictions feature only enforces tag matching. You must design your network topology to force certain clients to connect through a particular Connection Server instance.

Was this page helpful?

Provide feedback for this topic

Was this topic helpful?

Please do not include any personal or confidential information.

Generating link…