The [Limited Admin User|UserManagerAdminRestricted] scenario of CrushFTP handled the local FILE:// scenario very well and controls access to things there.  However, sometimes your VFS items are remote...such as on S3 or other locations.  You can assign management on this too, while still preserving secrecy on your remote VFS items for the limited admin managing access to them.\\
----
You should already be familiar with the [Limited Admin User|UserManagerAdminRestricted] scenario.