The Limited Admin User scenario of CrushFTP handled the local FILE:// scenario very well and controls access to things there. However, sometimes your VFS items are remote...such as on S3 or other locations. You can assign management on this too, while still preserving secrecy on your remote VFS items for the limited admin managing access to them.

---

Pre-requisites#

You should already be familiar with the Limited Admin User scenario.
You should already be familiar with the Connection Profiles.

Configuration#

1.) Create a VFS item in your ConnectionProfiles. From our prior example in Connection profiles, we used "testgroup1" so we are continuing with that here. Create an item named "testgroup1-_-MyS3Bucket". By using this naming convention, the limited admin who logs in who is managing "testgroup1" will be able to see this connection profile. So the name is important.


2.) Set the limited admin who is logging in to use this connection profile as their own VFS item.


3.) When utilizing this user and logging in as the limited admin, they only see this as their VFS on the left side. When they go into this folder, they see all the items appearing as a "connection profile" item...the tiny icon to the right of them indicates this. If they then drag an item to the right side, the item added to the user the limited admin is managing gts a VFS reflecting the current connection profile and path of that connection profile. See screenshot.

1.) Top left is confirming we are logged in as a limited admin account and only see the User Manager.
2.) The User Connection Group confirms this too showing we are managing 'testgroup1'.
3.) We made a user named "s34" for this test.
4.) We navigated down inside the s3 bucket into the folder 'ben' and have added the folder 'small' to this user's VFS.
5.) Getting properties on this 'small' folder confirms its configured utilizing the connection profile and the additional path.

That's it. Your limited administrators can now manage VFS items inside of the connection profile. Additionally the limited admin can only see connection profiles that are prefixed with their group name and "-_-". So they can't cross over to other groups that may have a different set of connection profiles.