In below I added Sarah to SAFR Server with Access Clearance having zone z2.   Milko has access clearance "Visitor" which is not limited to zones.  Reader 1 was added to zone z1.
 
Scan is in zone z1:
Image
 
Access Clearances:
 
Z1:
Image
 
Z2:
Image
 
 
People in SAFR Server:
Image
 
With Reader Monitor Mode=Enrolled and Stranger Monitoring, reader gets all persons.
Image
 
If reader is set to "Threat/Concern and Stranger" or "Diabled" then reader gets only Milko because Sarah's Access Clearance does not include zone z1.