Use location filter for session access

---
title: Use location filter for session access
description: Use the location filter criteria created in Session Access to reduce roles based on the location of the user.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/lf-for-session-access.html
release: australia
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Use Location Filter criteria, Location filter, Filter criteria, Adaptive authentication, Authentication, Access Management]
---

# Use location filter for session access

Use the location filter criteria created in Session Access to reduce roles based on the location of the user.

## Before you begin

Role required: adaptive\_auth\_admin

Plugin required: **Zero Trust - Location Based Access** \(`com.snc.zero_trust_location_access`\).

The following procedure describes how to create a Location Filter with the countries that you want to remove or limit roles to the users based on the location.

## Procedure

1.  Navigate to **All** > **Zero Trust Access** > **Session Access Role Configurations**.

2.  To create a session access role configuration, select **New**.

3.  On the form, fill in the fields:

<table id="table_vdl_r1g_twb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Name

</td><td>

Name of the configuration

</td></tr><tr><td>

Description

</td><td>

Short description of the configuration.

</td></tr><tr><td>

Policy

</td><td>

The access policy to use. Use the look-up icon to view the list of policies.**Note:** You must add the location filter input and conditions by opening the policy record.

</td></tr><tr><td>

Action

</td><td>

**Remove Roles** or **Limit to Roles**.-   **Remove Roles**: When the configured user logged in, the list of roles provided in the Role or Group List is removed for the logged-in session.
-   **Limit To Roles**: When the configured user logged in only the selected roles are provided to the user and all the other roles are removed for the logged-in session.


</td></tr><tr><td>

Role List

</td><td>

Role from the Role List.

</td></tr><tr><td>

Group List

</td><td>

Group from the Group List.

</td></tr></tbody>
</table>4.  Select **Submit**.

    The login for users based on the configured countries is as follows:

    -   If **Remove Roles**, the users from the configured countries in the location filter are removed with the roles configured for the session.
    -   If **Limit To Roles**, the users from the configured countries in the location filter have only the roles that are configured for the session.
    To learn more about how to remove or limit roles for a session, see [Use Zero Trust Access](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/use-zero-trust-access.md).