The Network People Support Forums

I'm trying to figure out how the feature: 'Allow users of this group to publish zones changes to the following nameservers:' when you create a subgroup works.

I've seemingly created two nameservers -- NSa, NSb in the base nameserver directory, then moved them into a subgroup, SubA -- and I'm able to grant subgroup permissions for them (now residing in a subgroup)

however, a different subgroup lets call it SubB at the same depth -- I've created 4 DNS servers in there -- NSc, NSd, NSe, NSf, and

I'm unable to allow Sub-Group SubA the ability to publish to SubB's NSc-NSf.

Am I using subgroups not as they're intended? Perhaps SubB should be under SubA or vice-versa?

It's a simple hierarchy, just like it looks. Nameservers can be delegated to sub-groups beneath them. So, lets say you have group A at the top level, and create three nameservers in it:

 A - ns1.a  ns2.a, ns3.a

Then you create a subgroup. When you create the subgroup, you can choose which of the nameservers that subgroup has permission to publish DNS records to. Now, let's say that you create B, as a subgroup of A with one nameserver.

 B - ns1.b

Since A is the top level, everything is a sub-group of it.

If you choose to allow subgroup B to publish to any of group A's nameservers, they will now have 4 nameservers available.

Now, lets say you create another subgroup, C, also as a sub-group of A. Zones in group C will be able to publish to nameservers in group A (if given permission) but will NOT be able to see nameservers in subgroup B.

If you want sub-group C to be able to publish to subgroup B's nameservers, then you need to make subgroup C a subgroup of B, then it will be beneath A & B and thus can inherit nameserves from both.

Thank you for the explanation.  I've rearranged my groups and its working great now!