Our company has a hosting service. We give subdomain to all our clients. Also, we would like to give email addresses to clients who has no private domain. These email addresses looks like: username[at]domain.tld I could manage that the clients can see only them own email address under Email/Email Mailbox. They don't see the domain under the Email/Domain. (with: UPDATE `mail_user` SET `sys_groupid` = '384' WHERE mailuser_id='285' limit 1 My problem is when they try to change password or setup email forward, they can't do that because the "domain form select" is empty. I can manage to add the domain to "global" with set in mysql `sys_perm_other` = 'ru': UPDATE `mail_domain` SET `sys_perm_other` = 'ru' WHERE domain_id='37' limit 1; But the problem is if I do that all the clients can delete the main domain under Email/Domain. Is there an elegant way to add the domain to globally but in "read only" mode? So they would be able to change password, add email forward but they can't delete/modify the "main" domain? And another question: what is the difference between the `ru` and `ruid` flags?