Home > Storage > PowerScale (Isilon) > Product Documentation > Management and Migration > PowerScale OneFS Authentication, Identity Management, and Authorization > Access zones and root-based paths
When Access Zones are configured, a root-based path must be defined to segment data into the appropriate Access Zone and enable the data to be compartmentalized. Access Zones carve out access to a PowerScale cluster creating boundaries for multi-tenancy or multi-protocol. They permit or deny access to areas of the cluster. At the Access Zone level, authentication providers are also provisioned.
For more information about Access Zone best practices, see the PowerScale: Network Design Considerations white paper.