Register a user in xsp and nab acl settings

I need some help from an administrator on xsp platform.

When I register a user using a hosted admin, the users email file is not created. See my other posting. I created the databases manual from template and they can login and use email. So there is a workaround that is fine.

But now the problem. A users public nab is the main host domain’s nab one. Not the hosted organisation but the ‘server one’. That is not wanted as they see all the other organizations and email addresses as well.

I want a hosted organization not be able to look into the nab other than for authentication purposes. Is that possible?

I think it has to do with extended access? But that all seems to be complicated. It there somewhere a good description out?

thank you

Bert