| 3 | | From #1261 |
| 4 | | |
| 5 | | Each ISP is provided a so-called origin (in fact it is API user of the ISP CRM).[[BR]] |
| 6 | | Any local user created within Portax user-base inherits the origin. |
| 7 | | |
| 8 | | == ACL |
| 9 | | |
| 10 | | Root user with {{{SuperUser}}} priviledge is required to create new users in foreign origin(s). |
| 11 | | |
| 12 | | Local administrator without the {{{SuperUser}}} priviledge granted with {{{AdminUsers}}} priviledge[[BR]] |
| 13 | | can only create new users within own origin. |
| 14 | | |
| 15 | | == Foreign origin access |
| 16 | | |
| 17 | | User can access foreign origin(s) when added to a group based in the foreign origin and the group[[BR]] |
| 18 | | is granted {{{OriginAccess}}} ACE. |
| | 3 | == ["Virtual ISP isolation"] |
