= Virtual ISP isolation

From #1261

Each ISP is provided a so-called origin (in fact it is API user of the ISP CRM).[[BR]]
Any local user created within Portax user-base inherits the origin.

== ACL

Root user with {{{SuperUser}}} priviledge is required to create new users in foreign origin(s).

[[Image(root-create-user.png, 640px)]]

Local administrator without the {{{SuperUser}}} priviledge granted with {{{AdminUsers}}} priviledge[[BR]]
can only create new users within own origin.

[[Image(local-create-user.png, 640px)]]

== Foreign origin access

User can access foreign origin(s) when added to a group based in the foreign origin and the group[[BR]]
is granted {{{OriginAccess}}} ACE.