API token for subdomain ?

Hi all,
Is it possible to issue a separate API token for each subdomain? I kinda sure its not possible as the token give to the whole zone, but I'm wondering if there's a way? The problem is the admin of subdomain1.domain.com can use the same API key to control the whole zone DNS settings, i.e request a valid ssl cert for *.subdomain2.domain.com, which I don't want to happen. Is there any way around?
Was this page helpful?