Zone Based Access Restriction
Zones are a new nice concept. Allow Admins to create multiple profile where zone can be assigned to single user or group. In this way, for example a user is able to manage Wi-Fi or VPN zone without touching other settings on XG.
Users and groups are a valid match criteria for firewall rules. This already allows you to create an association between zone and user, without needing to redefine how zones are used.
Alan, maybe my feature request was not so clear.
You have to improve Device Access profile. At the moment is not possible to create a profile and assign that profile to manage a single zone.
Is it clear now? If yes, can you reopen the feature request?