---
title: Hide datapoints or make them read-only by tag in Boss’nX
description: Hide datapoints or remove their commands for a Boss’nX role with tag rules, including untagged datapoints and more precise subtag exceptions.
canonical: https://wiki.can-nx.com/en/guides/boss-role-datapoint-tags/
language: en
product: Boss’nX
audience:
  - administrateur
  - installateur
context: "Boss’nX: role editor, Datapoint rules section of a supervision, editable role"
---

# Hide datapoints or make them read-only by tag in Boss’nX

Context: Boss’nX: role editor, Datapoint rules section of a supervision, editable role

In the Boss’nX role editor, the **Datapoint rules** section hides datapoints or removes their commands for the accounts with a role, based on the tag these datapoints carry: for example, an operator can view setpoints without being able to change them. Without a rule, every datapoint accessible to the role is visible. A rule does not change the tag carried by the datapoints.

Intended for the administrator or installer authorized to manage roles. To show only a precise list of a component’s datapoints, follow [the “Show only” restrictions](https://wiki.can-nx.com/en/guides/boss-role-show-only/) instead.

## Before you start

- You have [checked the role and the associated accounts](https://wiki.can-nx.com/en/guides/boss-roles-consult/).
- The role is editable. For a read-only system role or shared default role, have the administrator check which role to use.
- Datapoints remain subject to the [component scope](https://wiki.can-nx.com/en/guides/boss-role-scope-rules/), the [capabilities](https://wiki.can-nx.com/en/guides/boss-role-capabilities/) and any **Show only** restrictions: prepare these settings together.

## Open the role’s datapoint rules

1. In the relevant supervision, open **Menu → Users**, **Roles** tab.
2. Click **Edit** on the role’s row.
3. Select **Datapoint rules**.

## Add one or more tag rules

1. Click **Add tag rule**.
2. In **Search tags…**, search for the tag’s displayed name or path. The search ignores case; use the accents of the label if necessary.
3. Tick the tags you want. They can come from the catalog categories or from **In this project**. A tag already covered by its own rule is no longer offered.
4. To tick several tags at once, use a category checkbox, which selects its visible results, or **Select all**, which covers the results of the current search. Choices made earlier and hidden by a new search remain kept.
5. Check the counter and click **Add … rule(s)** at the bottom of the panel.
6. The new rules appear with the **Hidden** decision. Choose the decision you want on each one before saving the role.

To prepare a path absent from the list, type it and tick **Use "…"** when it is offered. The path accepts segments of lowercase letters, digits or underscores, separated by slashes; internal spaces, accents and plain hyphens are not accepted. This operation adds a rule to the role: it does not assign this tag to datapoints and does not create their configuration.

In the search field, **Escape** first clears a non-empty search, then closes the panel when the field is empty. **Cancel**, a click outside the panel or another click on the add button closes the panel without adding the pending choices.

## Choose Visible, Hidden or Read-only

| Decision | Effect for the role’s accounts |
| --- | --- |
| **Visible** | Leaves the datapoint visible as far as this tag rule is concerned. The other restrictions and rights still apply. |
| **Hidden** | Hides the datapoints carrying this tag in the displays concerned. |
| **Read-only** | Lets users view the datapoints concerned without their editable commands. |

Paths are hierarchical: a rule on a parent tag covers its subtags. **also covers … subtag(s)** indicates the subtags present in the project. When a more precise rule exists for a subtag, that rule sets the decision for the subtag. You can therefore make a family of datapoints read-only and define a more precise exception for one of its subtags.

**Visible** does not by itself grant the capability to send commands. For a datapoint that must be commanded, also check that it is commandable and that the role has the necessary capabilities. If a **Show only** restriction is used, also check its selection. For a datapoint that must remain viewable, avoid contradictory decisions and have the configuration checked with the account concerned.

## Set untagged datapoints

In the add panel, the **Special** category offers **Untagged datapoints**. Tick this row, add the rule, then choose **Visible**, **Hidden** or **Read-only**.

This rule applies only to datapoints that have no tag. To set a datapoint that already carries a tag, use the rule for its tag or for one of its parents.

## Remove one or more rules

For a single rule, click the **Remove rule** trash icon on its row. Review **Remove datapoint rule**, then confirm with **Remove**, or choose **Cancel** to keep it.

For several rules:

1. Tick the checkboxes to the left of the relevant rows. The selection bar appears.
2. **Select all (…)** selects all the rules displayed in this section; **Cancel** empties the selection without removing any rule.
3. Click **Delete selection**.
4. Check the names and decisions in the confirmation, then click **Remove**.

During the selection, the add-tag button is hidden: cancel the selection to get it back. Cancelling the removal confirmation keeps the selected rows.

Removing a rule does not delete the datapoints. After a removal, review the remaining rules, especially those of parent tags, as well as the **Show only** restrictions: the final result depends on this whole set of settings.

## Save the role

1. Review each decision and any other sections you changed.
2. Click **Save** in the bottom bar.
3. Wait for **Role updated** and the return to the list.

Saving covers the whole role. Before saving, **Discard** restores all sections to their loaded state. Leaving through **Back to roles** with unsaved changes asks you to abandon them; declining keeps the draft.

## Check the result

1. Reopen the role to check the rules kept.
2. Have an account concerned open a new session.
3. With this account, check a viewable datapoint, a hidden datapoint and, if necessary, a read-only datapoint.

## Troubleshooting

- A datapoint remains missing or commandable contrary to the expected result: check its exact tag, the rules of its parents, the **Show only** restrictions, the account’s role and its capabilities.
- Saving error: check the reloaded state before trying again.

If the problem persists, contact support@can-nx.com with the supervision, the role, the datapoint, its tag and the checks performed.

French labels: **Règles de datapoints**, **Ajouter une règle de tag**, **Rechercher des tags…**, **Dans ce projet**, **Spécial**, **Datapoints sans tag**, **Visible**, **Masqué**, **Lecture seule**, **Supprimer la règle**, **Supprimer la sélection**, **Enregistrer**, **Annuler les modifications**, **Rôle mis à jour**.