Overview of the DNS policy framework

Ensim Pro enables you to delegate zone management tasks to Site Administrators. Enabling Site Administrators to manage the zones and records of their sites allows them the flexibility to enhance or extend the existing capabilities of their sites. However, while certain tasks such as adding or updating zone records may be delegated without concern, tasks such as SOA updates may affect the functioning of the name servers. To prevent changes or updates that may adversely affect the existing DNS configuration, Ensim Pro creates policy files that you can use to restrict the their zone management capabilities.

# Policy file

The policy file maps each DNS-related action to a corresponding identifier that can be assigned a True (Yes) or False (No) value. The assigned value determines whether or not a user can perform the action.

You can view the list of policy files at /etc/virtualhosting/policies/.