---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Use location filter for session access

# Use location filter for session access {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the location filter criteria created in Session Access to reduce roles based on the location of the user.

## Before you begin

Role required: adaptive_auth_admin

Plugin required: Zero Trust - Location Based Access (<kbd class="ph userinput">com.snc.zero_trust_location_access</kbd>).

The following procedure describes how to create a Location Filter with the countries that you want to remove or limit roles to the users based on the location.

## Procedure

1. Navigate to AllZero Trust AccessSession Access Role Configurations.
2. To create a session access role configuration, select New.
3. On the form, fill in the fields:  
   {#lf-for-session-access__table_vdl_r1g_twb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name of the configuration |
   | Description | Short description of the configuration. |
   | Policy | The access policy to use. Use the look-up icon to view the list of policies. Note: You must add the location filter input and conditions by opening the policy record. |
   | Action | Remove Roles or Limit to Roles. * Remove Roles: When the configured user logged in, the list of roles provided in the Role or Group List is removed for the logged-in session. * Limit To Roles: When the configured user logged in only the selected roles are provided to the user and all the other roles are removed for the logged-in session. {#lf-for-session-access__ul_q4g_bzq_2xb} |
   | Role List | Role from the Role List. |
   | Group List | Group from the Group List. |
   [Table 1. Session Access Role Configuration form]

   {#lf-for-session-access__table_vdl_r1g_twb}
4. Select Submit.  
   The login for users based on the configured countries is as follows:
   * If Remove Roles, the users from the configured countries in the location filter are removed with the roles configured for the session.
   * If Limit To Roles, the users from the configured countries in the location filter have only the roles that are configured for the session.

   {#lf-for-session-access__ul_oz4_dvf_kxb}

   To learn more about how to remove or limit roles for a session, see [Use Zero Trust Access](https://www.servicenow.com/docs/~3L8yoJttnRmtA1~NKbqtA "Use the Zero Trust Access feature with an end-to-end use case.").
{#lf-for-session-access__steps_rsb_1vf_kxb}

*[\>]: and then