Question Isolating Applications in Plesk – Separation of Owner Privileges and Subdomain Management Across Subscriptions?

[Azurel]

Server operating system version

AlmaLinux 8.10

Plesk version and microupdate number

Plesk Obsidian 18.0.68#2

I manage multiple domains and subdomains within a single subscription in Plesk Obsidian. Among these, I have Matomo installed on one of the subdomains. My goal is to limit the impact in case of a security breach (for example, if Matomo gets compromised, only as one of many possibilities) by separating the file ownership (owner) of the critical application from the rest. Like this:

domainA.com => Owner=user1
subdomain1.domainA.com => Owner=user2

My questions are as follows:

• Owner Separation: Is there a way in Plesk Obsidian to change the file owner or permissions for individual domains or subdomains? If not, are there any plans to include such a feature in future releases of Plesk?
• Alternative Approaches: What workarounds or security concepts (e.g., separate subscriptions, container-based solutions, or specific PHP-FPM configurations) have you successfully implemented in similar scenarios?
• Subscription Boundaries: Is it possible to create subdomains of a domain managed in one subscription within another subscription, or are domains and all associated subdomains always tied to the same subscription?

I look forward to hearing your experiences and suggestions!

 

[alapshin]

Hello @Azurel,
I suppose the only way is to create "subdomain1.domainA.com" as a separate subscription. Since Plesk allows to create "main domain" with any name. Even like sub.ofsub.ofsub.domain.tld.
And then transfer data from existing subdomain1.domainA.com.
The same is mentioned in the article How to convert a subdomain into a separate domain in Plesk?
As result you will recieve:

 

[Azurel]

Interesting, thanks for the answer! Does that count as a “domain” in the Plesk license limit?

In general, it is not entirely clear to me whether subdomains or only domains count in the license and what kind of domains count in the limit. The license only states the maximum number for “License Information”, but not how many you have already used. What I have found is a number in last item “Domains” under “Server information”. However, there is a number there that I cannot reproduce under the “Domains” overview. The “Domain Hosting” there (Status=Any) has a completely different value.