Overview of the DNS policy framework

Ensim Pro enables you to delegate zone management tasks to resellers and Site Administrators. Enabling resellers to manage the zones and records of their sites allows them the flexibility to leverage existing partnerships and easily manage administrative tasks involved in enhancing or extending existing business capabilities. However, while certain tasks such as adding or updating zone records may be delegated without concern, tasks such as SOA updates may affect the functioning of the name servers. To prevent changes or updates that may adversely affect the existing DNS configuration, Ensim Pro creates policy files that you can use to restrict the zone management capabilities of resellers and Site Administrators.

# Policy file

The policy file maps each DNS-related action to a corresponding identifier that can be assigned a True (Yes) or False (No) value. The assigned value determines whether or not a user can perform the action.

You can view the list of policy files at /etc/virtualhosting/policies/.