How to Configure a Permissions Group with Access to Limited Domains

This article explains how to configure a custom permissions group so it can access only one or more specific domains, instead of inheriting access across all domains in the account.

When to Use This Article

• You need a user group to access only one domain or a limited set of domains.
• You need to remove inherited domain permissions and assign permissions per domain.
• You need to prevent a group from viewing or modifying domains that were not explicitly assigned.

Steps

1. Log in to UltraDNS.
2. Click Accounts.
3. Click the Account Name.
4. Click Groups.
5. Click Add Group.
6. Enter a group name and click Save.
7. Select the newly created group from the Groups list.
8. Click View Permissions.
9. Leave Account set to Read.
10. Uncheck Inherit next to Domain Services.
11. Move the Domain Services slider to None.
12. Leave the lower domain and record permission entries set to Inherit, then click Save.
13. Click Domains.
14. Locate the domain that the group should access.
15. Click the Key icon under the Permissions column for that domain.
16. Locate the custom group and move the slider to the desired permission level for that specific domain, then click Save.
17. Repeat the domain-level permission step for each additional domain the group should access.
18. Add the user to the custom group if they are not already a member.

Setting Domain Services to None removes inherited access to all domains for the group. 

Access is then granted only on the specific domain where the Permissions key icon is used to set a domain-level permission. 

Also, you do not need to update every other domain to remove access.

Permission Levels

• Read allows the group to view the selected domain.
• Read Write allows the group to view and edit existing content.
• Read Write Create allows the group to view, edit, and create content.
• Read Write Create Delete allows the group to view, edit, create, and delete content.

Verification

• Confirm Domain Services is set to None and is not inheriting from Account.
• Confirm the lower domain and record permission entries remain set to Inherit.
• Confirm the group has the intended permissions only on the selected domain where the custom group slider was set.
• Confirm the group does not have access to domains that were not explicitly assigned.

Related Articles

• Advanced Permissions Quick Start