In the 3.6 version of ePO, I could set user "roles", so someone could only have access to the "HVTN" branch of our directory tree, for example. Within that branch, they would be the "site admin", and have all the permissions they needed.
I'm trying to setup a similar thing with 4.0, but I can't figure out how to do this..."permission sets" for users seem to be the closest, but I can't see how to limit the site admin's access to only their branch of the directory tree.
I guess I wasn't looking closely enough...the Permission Sets tab is where I was looking for something that would limit access for a "site admin" to a particular site (branch on the directory tree), but I wasn't finding anything...Until I went back and saw "System Tree Access"...doh!
Amazing that you don't see "System Tree" when you're looking for "Directory Tree"...