--- title: "Domain Administrator best practice" slug: "domain-administrator-best-practice" tags: ["GateManager"] updated: 2021-11-23T12:44:19Z published: 2021-11-23T12:44:19Z canonical: "kb.secomea.com/domain-administrator-best-practice" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.secomea.com/llms.txt > Use this file to discover all available pages before exploring further. # Domain Administrator best practice This article describes the best practice for organizing subdomains as a Domain administrator. It covers arranging Users and licences, SiteManagers, and agents. ## User Icon overview ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003617919.png) ## User description ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003627021.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003633000.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003639092.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003644369.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003651800.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003661662.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003668998.png) ## Structure To ease the overview and limit access for users it is good practice to arrange a structure like the one below. ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003965792.png) Users and the related licences can be arranged like the below example. LinkManager licences need to be located with the users. (Floating licence). LinkManager Mobile licences can be moved anywhere after being attached to the user (Dedicated licence) so they could be moved to a subdomain called "used licences". ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003730953.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003736086.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003742287.png) A LinkManager who needs his own licence to be guaranteed access can be placed in a subdomain. ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003748839.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003753085.png) ## Joining User accounts to subdomains to give access ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003760780.png) In the below case LinkManager-User1 (joined) can access all SiteManagers and agents in FactoryA+B ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003768702.png) ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003775957.png) Whereas LinkManager-User2 (joined) can only access the agent in the "Machine Access" subdomain ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003782185.png) Below is the full overview of the structure for "CompanyName" ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003792949.png) ## Notes ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617003800308.png)