# Edge router: Identity does not have access to any services

**URL:** <https://openziti.discourse.group/t/edge-router-identity-does-not-have-access-to-any-services/384>\
**Category:** Building/Development\
**Created:** [April 8, 2022, 3:35am UTC](https://openziti.discourse.group/t/edge-router-identity-does-not-have-access-to-any-services/384 "2022-04-08T03:35:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [April 8, 2022, 3:35am UTC](https://openziti.discourse.group/t/edge-router-identity-does-not-have-access-to-any-services/384/1 "2022-04-08T03:35:14Z")

</div>

I made some changes.. and received this error from the policy advisor

> ziti edge policy-advisor identities

ERROR: instance-20220317-1005-edge-router

- Identity does not have access to any services. Adjust service policies.

I dont remember setting up an identity for the edge router... does it matter?

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [April 8, 2022, 10:19am UTC](https://openziti.discourse.group/t/edge-router-identity-does-not-have-access-to-any-services/384/2 "2022-04-08T10:19:17Z")

</div>

Nope does not matter. You’re in control. 🙂 It only matters if you try to use that edge router’s identity for “offloading” traffic. The expressInstall makes a bunch of assumptions on your behalf, one of which is that you will perhaps want to use all your routers as points of demarcation for traffic… That might be true - it might not be, but the expressInstall is meant as a learning tool and a quick way to get setup. As such it enables a feature on all the edgeRouters it stands up called “tunneling mode”.

Tunneling mode allows the router to have an identity “automagically” created for you when you enroll and bring that router online.

If you never want to offload traffic from that router - you don’t need to and you leave that one identity with no access to any services.

Hopefully that’s clear

---

<div class="post-metadata">

**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\
**Post date:** [April 8, 2022, 10:30am UTC](https://openziti.discourse.group/t/edge-router-identity-does-not-have-access-to-any-services/384/3 "2022-04-08T10:30:08Z")

</div>

Great to know… I will be using this for my next test… to implement a reverse proxy implementation…