In below I added Sarah to SAFR Server with Access Clearance having zone z2. Milko has access clearance "Visitor" which is not limited to zones. Reader 1 was added to zone z1.
Scan is in zone z1:
People in SAFR Server:
With Reader Monitor Mode=Enrolled and Stranger Monitoring, reader gets all persons.
If reader is set to "Threat/Concern and Stranger" or "Diabled" then reader gets only Milko because Sarah's Access Clearance does not include zone z1.