# dynamic ACL for remote vendors

**URL:** <https://community.f5.com/t/dynamic-acl-for-remote-vendors/16439>\
**Category:** Technical Forums\
**Tags:** big-ip-access-policy-manager-apm, active-directory, security, acl\
**Created:** [May 30, 2017, 7:14pm UTC](https://community.f5.com/t/dynamic-acl-for-remote-vendors/16439 "2017-05-30T19:14:38Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![pspecht\_152507](https://avatars.discourse-cdn.com/v4/letter/p/3e96dc/32.png) [@pspecht\_152507](https://community.f5.com/u/pspecht_152507)\
**Post date:** [May 30, 2017, 7:14pm UTC](https://community.f5.com/t/dynamic-acl-for-remote-vendors/16439/1 "2017-05-30T19:14:38Z")

</div>

I am trying to learn about setting up ACLs for remote users. We have multiple vendors who remote in to connect to PLCs or remote machines and I want to restrict their logon to only that machine.

I am a bit confused about where to place the ACL. We authenticate against AD, so I think I read that I need to put the ACL in an AD attribute. Is this the direction I should read up on? I have this [404 Page not found | BIG-IP Documentation](https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-config-11-1-0/apm_config_resources.html147209) In what attribute do I place the ACL?