---
title: "Applying Access Control to Operations"
canonical: "https://docs.infoblox.com/space/nios85/35752981/Applying%20Access%20Control%20to%20Operations"
format: markdown
---
When you apply access control to NIOS operations, you can use anonymous ACEs or a named ACL. You cannot combine ACEs and named ACLs for access control. Depending on the access control types each operation supports, you may or may not be able to apply a named ACL to a specific operation. For information about which access control types each operation supports, see the [*Operations that Support Access Control*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35785573) table.

> ⚠️ **Note**
> ⚠️ 
> ⚠️ If you disable access control or select **None** or **Any** for an operation, the appliance removes the previously applied named ACL or the configured anonymous ACEs. To avoid losing your ACE configuration, Infoblox recommends that you convert the ACEs to a named ACL.

For information about how to apply access control to each supported operation, see the following:

- DNS zone transfers, as described in [*Enabling Zone Transfers*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35915035)
- DNS queries, as described in [*Controlling DNS Queries*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35385812)
- Recursive queries, as described in [*Enabling Recursive Queries*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35448674)
- Dynamic DNS updates, as described in [*Configuring DNS Servers for DDNS*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35784952)
- AAAA filtering, as described in [*Controlling AAAA Records for IPv4 Clients*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35849612)
- Blackhole list, as described in [*Configuring a DNS Blackhole List*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35482464)
- Match clients list for DNS views, as described in [*Defining Match Clients Lists*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35752634/Configuring+DNS+Views#Defining Match Clients Lists)
- Match destinations for DNS views, as described in [*Defining a Match Destinations List*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35752634/Configuring+DNS+Views#Defining a Match Destinations List)
- DNS64 clients, DNS64 mapped IPv4 addresses, and DNS64 excluded IPv6 addresses, as described in [*Setting DNS64 Group Properties*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35816157/About+DNS64#AboutDNS64-SettingDNS64GroupProperties)
- File distribution services, as described in [*Configuring Access Control for File Distribution*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/144572483/Managing+File+Distribution+Services#ManagingFileDistributionServices-ConfiguringAccessControlforFileDistribution)
- Grid Manager and API access, as described in [*Configuring Security Features*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35849662/Managing+Security+Operations#ManagingSecurityOperations-ConfiguringSecurityFeatures)
- NTP access control, as described in [*Defining NTP Access Control*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35448300/Using+NTP+for+Time+Settings#UsingNTPforTimeSettings-DefiningNTPAccessControl)
- Syslog proxy access, as described in [*Configuring Syslog for Grid Members*](https://infoblox-docs.atlassian.net/wiki/spaces/nios85/pages/35784616/Using+a+Syslog+Server#UsingaSyslogServer-ConfiguringSyslogforGridMembers)