Is it possible to restrict which customer names are visible/searchable by agents?
Our scenario is that our Zammad is used by customer facing agents, and also by HR to deal with sensitive staff issues. The tickets that HR sees are in a separate group which the other agents can’t see or search for, so that’s fine. However it looks like customer/user accounts are always visible/searchable by all agents, and this can include the personal email addresses of staff when they contact HR, and this is a problem.
Am I missing something, or are customer names/email addresses always visible and searchable unrestricted for all agents, or can we exclude some of these from Elasticsearch?