I need a way to give an agency partner access to only the websites and associated domains they manage, including the ability to edit DNS, without giving them access to unrelated client domains in my WPMU DEV account.
Currently, neither Team Member nor Client access fully supports this:
Team Members: I can restrict a team member to specific websites, which works well. However, domain access is all-or-nothing. I cannot select individual domains or automatically limit their domain access to the domains associated with the websites they have permission to manage. This means granting DNS access would also expose domains belonging to other clients.
Clients: I can select both specific websites and specific domains, which provides the level of access control I need. However, only one client can be associated with a website. If the business owner is already attached to their website, I cannot also give their agency partner access as a client, and vice versa.
Ideally, I would like either granular domain permissions for Team Members, allowing individual domains to be selected just like websites, or the ability to associate multiple Clients with the same website.
This would make it possible for agencies and hosting providers to safely give third-party partners access to the specific websites and DNS records they manage without exposing unrelated client websites or domains.