It is possible to define users and roles to restrict access to the OPC UA Server. However, it is not possible to restrict which tags a user has access to once they have been allowed to connect to the OPC Server. It is "all or nothing". Add functionality that gives developers the ability to only expose a specific subset of tags to specific users when that user connects to the OPC Server.