Understanding Restricted Maps
Restricted Maps allow you to control who can view certain content on your map. This feature is useful when your map includes information that should only be visible to authorized users, such as staff-only locations, internal facilities, or detailed interior layouts.
With Restricted Maps, you can require visitors to sign in before viewing content or selectively hide specific parts of the map unless a user has the appropriate permissions.
Your map supports three types of restrictions, each controlling a different level of visibility:
Entire Map Restriction – Requires sign-in before any map content can be viewed.
Category Restrictions – Hides specific categories and their locations from unauthorized users.
Interior Restrictions – Limits access to interior floors and building layouts, showing exterior-only content to public visitors
These restrictions can be used individually or combined to create layered access control.
Availability of Restricted Maps
Restricted Maps is an advanced feature that must be enabled for your map before the restriction options appear in the CMS.
If your organization would like to use this feature, please contact your Partner Success Manager. Once enabled, administrators will be able to configure category and interior restrictions directly within the CMS.
Note: Restricted Maps may require additional licensing depending on your organization’s plan.
Comparing Restriction Types
Use the table below to quickly understand how each restriction works.
| Restriction Type | What It Controls | What Visitors Experience | Example Use Case |
|---|---|---|---|
| Entire Map Restriction | Access to the entire map | Visitors must sign in before the map loads. Unauthorized users cannot view any map content. | Private or internal maps |
| Restricted Categories | Specific categories and locations | The map loads normally, but restricted categories and their locations are hidden until an authorized user signs in. | Staff-only locations or sensitive areas |
| Restricted Interiors | Interior floors and location data | Visitors see an exterior-only view of the map. Interior floors, the floor selector and interior locations appear after signing in. | Protecting building floor plans |
You can also combine restriction types to create layered access control. For example, a map might require users to sign in while also hiding specific categories or interior floors based on user permissions.
Restricting the Entire Map
Restricting the entire map requires visitors to sign in before they can view any map content.
If someone attempts to access the map without signing in, they are redirected to a login page.
Visitor Experience
When entire map restriction is enabled:
Visitors who access the map are redirected to a sign-in page
After signing in:
Users with permission can view the map
Users without permission see an error page
Log in screen a user will use to view the front end of the map
Note: Currently all login pages are Concept3D branded. Work to support using Organizations existing SSO login pages is current in progress.
Access is controlled through user authentication and permissions. See Access Permissions below for details.
Restricting Specific Categories
Category restrictions allow administrators to hide selected categories and their locations from visitors who are not signed in or who do not have the required permissions.
Visitor Experience
When category restrictions are applied:
The map loads normally
Restricted categories do not appear in the sidebar
Their locations do not appear on the map
Restricted locations do not appear in search results
Visitors will see a Sign In option in:
The map header (desktop)
The mobile navigation bar
There is no message indicating that content is hidden. The map simply appears to contain fewer locations.
After signing in with the appropriate permissions, restricted categories and locations become visible.
How It Works
Administrators can mark individual categories as Restricted in the CMS on the category edit page.
When a category is restricted:
All child categories are automatically restricted
Associated locations are hidden from unauthorized users
Restricted content is removed from:
Map markers
Sidebar categories
Search results
Wayfinding search
Note: Restricting a category hides the category and its contents from the map sidebar and search results. Locations may still appear elsewhere if they are used in other features, such as:
Map Tours
Other categories the location belongs to
Permissions Required
Only authenticated users whose role includes the View Restricted Categories permission can see restricted content.
To limit access to the front-end map only, be sure the role also includes the Front End Only permission. This prevents users from accessing the CMS.
Restricting Interior Content
Interior restrictions limit the map to an exterior-only view for visitors who are not signed in or do not have the appropriate permissions.
This prevents public access to interior floors and building layouts.
Visitor Experience
When interior restrictions are enabled:
The map displays exterior locations only
The floor selector does not appear
Locations that exist only on interior floors are hidden
Search results include exterior locations only
Wayfinding routes are limited to exterior navigation
Tour stops on interior floors are not included
Visitors will see a Sign In option in:
The map header (desktop)
The mobile navigation bar
How It Works
Interior locations are determined using floor or level data.
The exterior floor (Level 0) remains visible to all visitors.
Locations that exist on multiple floors may still appear, but visitors will only see the exterior presence.
Permissions Required
Only authenticated users whose role includes the View Restricted Interiors permission can see restricted content.
To limit access to the front-end map only, be sure the role also includes the Front End Only permission. This prevents users from accessing the CMS.
Combining Restriction Types
All three restriction types can be used together to create layered access control.
Examples include:
Entire Map + Restricted Categories
Visitors must sign in to view the map, and certain categories may remain hidden depending on permissions.
Entire Map + Restricted Interiors
Visitors must sign in to access the map, but interior floors may still be hidden depending on permissions.
Restricted Categories + Restricted Interiors
The map remains publicly accessible, but certain categories and interior floors are hidden until visitors sign in with the correct permissions.
All Three Together
Visitors must sign in, and additional category and interior restrictions are applied based on the user’s permissions.
Important: Images and Media
Content restrictions control whether locations, categories, and interior data appear on the map.
However, image and media files are currently hosted on a public server and are not protected by these restriction settings.
This means that if someone has a direct URL to an image, they may still be able to access that file even if the associated map content is restricted.
What This Means
When uploading media to restricted content:
Avoid uploading sensitive images
Do not upload detailed interior floor plans if this level of protection is not sufficient
Avoid proprietary or confidential imagery
If your organization requires stronger protection for media files, future infrastructure updates are planned to introduce media-level access controls.
Access Permissions
Access to restricted map content is controlled through user authentication and role-based permissions.
Visitors must sign in with an authorized account to view restricted content. After signing in, what they can see depends on the permissions assigned to their role.
| Permission | What It Allows |
|---|---|
| Front End Only | Allows a user to view maps that require sign-in but ensures they DO NOT have access to the CMS. |
| View Restricted Categories | Allows a user to see categories and locations marked as restricted |
| View Restricted Interiors | Allows a user to view interior floors and building layouts |
Permissions may be managed through:
User roles in the CMS
Single Sign-On (SSO) identity providers
Organizations using SSO can automatically assign permissions through their identity system, making it easier to manage access for large groups of users.
SSO is required for Organizations that need support for large amounts of users.
Tips for Success
Plan your restriction strategy early to determine what content should be public versus restricted
Use category restrictions for specific sensitive locations, such as staff offices or operational areas
Use interior restrictions when building layouts should not be publicly visible
Test permissions with different user roles to confirm restrictions behave as expected
Review uploaded media carefully until media access controls are available