Multiple admins for domain

Managed DNS Hosting
1

Hi!

What is considered best practice if more than one person is allowed to edit a domain?

  • A) Share the account credentials?
  • B) Share a Token?
  • C) Generate a token for each admin?
  • D) Something else?

Use case: More than one admin for one or more domains.

Options B and C only work for API access not for the web GUI, unless I am missing something?

Thanks!

fiwswe

2

Hi fiwswe,

deSEC currently does not support sharing domains across multiple user accounts.

While that is the case, it is best practice to not share any credentials or tokens. So I’d say c) is the winner.

In your scenario, you would want to bind each admin’s token to the set of domains that should be read/write-accessible for that admin. This functionality is currently not available, but I’ll start working on it next week, so it should be available soon.

It’s true that option c) only works for API access. The GUI is meant to provide a basic interface for people who need basic functionality and is really “just another API client”. We welcome additional functionalities to the GUI via pull requests, and also appreciate other API clients emerging.

Stay secure,
Peter

3

Thanks Peter!

I’m looking forward to the domain scoped tokens. That and the planed role/use case scoping for tokens will help make things more secure.

fiwswe

4

It would be really useful if it was possible to have multiple accounts for the same domain.

5

Hi DesruX,

Thank you for your message, and welcome to deSEC! :slight_smile:

We are tracking this feature here, and are looking for someone to sponsor it. If you’re interested, please reach out!

Stay secure,
Peter