Sub-server Group Permissions

2 posts / 0 new
Topic locked
Last post
#1 Sun, 04/25/2010 - 06:59
fatbear

Sub-server Group Permissions

WANTED: Group administrators that can manage a subset of sub-servers under a top-level domain. Is this possible?

Here is some more detail to make the above request clearer:

  1. I want the notion of a "Group Administrator" that has responsibility for a subset of the domains within a customer account.

Top-level domain: top.com (user id: top, group id: top) Sub-servers:

Group 1: sub-server domain: sub1.com (user id: top, group id: top_group1) sub-server domain: sub2.com (user id: top, group id: top_group1)

Group 2: sub-server domain: sub3.com (user id: top, group id: top_group2) sub-server domain: sub4.com (user id: top, group id: top_group2)

  1. When a group administrator logs in via FTP, they would have access to all content in their group. The group administrator can upload, download, or modify all files in their group. This would include the homes and public_html files in their group.

This is really important for organizations that own multiple domains and want to give management responsibility to subsets of those domains to different individuals. Creating top-level servers for each group isn't a solution (obviously: the group manager could change the password and the account owner would lose control).

Is there any way to use Virtualmin Pro to get the effect of having group administrators?

Sun, 04/25/2010 - 11:46
andreychek

I want the notion of a "Group Administrator" that has responsibility for a subset of the domains within a customer account.

That's unfortunately not possible... an admin for a Virtual Server can administer all the Virtual Servers and Sub-Servers within that account. Your only two options in this case are:

  1. Create a new top-level account, and put the domains you want the admins to manage within that account.

  2. Create a number of FTP accounts for each Virtual Server, and give select users access to those FTP accounts. FTP accounts can be limited to one specific domain (or a specific sub-directory within that domain).

    -Eric

Topic locked