Resolution
Can certain attribute fields be hidden from Assistant Admins when they view user account properties?
goal
How do I prevent Assistant Admins from seeing values for default attribute fields?
goal
How do I hide user account attributes?
fact
Directory and Resource Administrator 7.x
fact
Directory and Resource Administrator 8.0
fix
Yes. Directory and Resource Administrator (DRA) can hide any attribute field that you do not want Assistant Admins to see or modify.
To hide attribute fields, remove any delegations that allow them to see the fields, and then replace them with a custom power.
Typically to manage user objects, Assistant Admins are delegated the View All User Properties, Modify All User Properties or Modify General User Properties power (in addition to any other powers for specific properties). By removing the delegation and replacing it with a custom Power that contains only the attribute fields you want the Assistant Admins to manage, all remaining attribute fields are "grayed out," and Assistant Admins cannot view or modify them on the user account properties pages.