# Security Domain for mapping "Manage Changes"

**URL:** <https://community.bloomreach.com/t/security-domain-for-mapping-manage-changes/542>\
**Category:** Experience Manager (PaaS/OnPrem)\
**Created:** [October 31, 2018, 4:48pm UTC](https://community.bloomreach.com/t/security-domain-for-mapping-manage-changes/542 "2018-10-31T16:48:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![skannappan](https://avatars.discourse-cdn.com/v4/letter/s/6a8cbe/32.png) [@skannappan](https://community.bloomreach.com/u/skannappan)\
**Post date:** [October 31, 2018, 4:48pm UTC](https://community.bloomreach.com/t/security-domain-for-mapping-manage-changes/542/1 "2018-10-31T16:48:31Z")

</div>

Hi,

I currently have configured 3 channels and want to create an admin role that can access only one channel.  
For this I created a domain that allows access to /content and a domain that allows access to /content/{channelfolder} and excludes the other 2 content folders.  
Everything seems as expected except I am unable to get the “Manage Changes” on the Channel Manager for the Admin.  
Is there a specific default domain that i am missing that will include this ? The current default domains that I am including are

autoexport  
brokenlinks  
versioning  
defaultwrite  
hstconfig  
formdata  
workflow  
hipporequests

---

<div class="post-metadata">

**Author:** ![jasper.floor](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/jasper.floor/32/28_2.png) [@jasper.floor](https://community.bloomreach.com/u/jasper.floor)\
**Post date:** [November 2, 2018, 10:05am UTC](https://community.bloomreach.com/t/security-domain-for-mapping-manage-changes/542/2 "2018-11-02T10:05:51Z")

</div>

HI,

please see:

> **[Grant Access to One Channel Only - Enterprise Java Content management system -...](https://www.onehippo.org/library/concepts/security/authorization-use-cases/grant-access-to-one-channel-only.html)**
>
> Hippo Open Source Enterprise Content Management

Not sure what you mean by an admin role for one channel. Our default roles are author, editor and admin. It makes sense to restrict authors and editors, but admin is a very powerful role and is meant for “root” level access. If it is more than a channel editor, eg someone who can create channel specific users, then it get more complex. It is possible, but it would be a bit of work to figure out exactly how to set it up.