Can certain attribute fields be hidden from Assistant Admins when they view user account properties?
How do I prevent Assistant Admins from seeing values for default attribute fields?
How do I hide user account attributes?
Directory and Resource Administrator 7.x
Directory and Resource Administrator 8.0
Yes. Directory and Resource Administrator (DRA) can hide any attribute field that you do not want Assistant Admins to see or modify.
To hide attribute fields, remove any delegations that allow them to see the fields, and then replace them with a custom power.
Typically to manage user objects, Assistant Admins are delegated the View All User Properties, Modify All User Properties or Modify General User Properties power (in addition to any other powers for specific properties). By removing the delegation and replacing it with a custom Power that contains only the attribute fields you want the Assistant Admins to manage, all remaining attribute fields are "grayed out," and Assistant Admins cannot view or modify them on the user account properties pages.