- Divisions own zones and have their own members. Create one for each team that manages its own zones. Users only see the divisions they’re assigned to.
- Roles bundle permissions. Built-in: Owner, Editor, Viewer; you can add your own.
- Users sign in to DNZ and hold one role in each division they belong to.
Permissions
Server-wide features are for superadmins only: forwarding, views, replication, proxies, server-wide
filtering, notifications and Settings → General.
Common tasks
Create a division
Create a division
Access → Divisions → Create (or Create New → Division). Superadmins only.
Add a user
Add a user
Access → Users → Create (or Create New → User). Give them a password and pick their role
in each division; No access hides a division from them. Tick superadmin for full access.
They must change the password at their first sign-in.
Add a member to your division
Add a member to your division
Division Owners (or anyone with
members.manage) add people under Access → Members and
assign their role in that division.Create a custom role
Create a custom role
Access → Roles → Create (or Create New → Role), then tick its permissions. Assign it from
Users or Members.
Lock someone out or reset a password
Lock someone out or reset a password
Turn a user off, or reset their password; they must choose a new one at the next sign-in.
Automation
Scripts and tools don’t sign in as users. Give them an API token or a DNS update key, both owned by a division. A token or key never has more rights than the person who created it, and loses rights when its creator does.Your own account
The account menu (top right) opens your account settings: your profile and divisions, your password (changing it signs out your other sessions), and the devices you’re signed in on. Sign any of them out from there, or withdnz session revoke. See Security.