User permissions to vhosts are done via a LDAP group under the corresponding cluster. This setup requires each cluster to have its own distinct LDAP configuration, specially the vhost_access_query.

( NOTE : ABOVE ADVANTAGE IS WE CAN DISPLAY ONLY WHAT WE NEED THAT THINGS ONLY WE CAN ADD TO QUERY BUT ALL THE INNER QUERIES ARE EXECUTED BUT WE CAN RESTRICT WHAT DISPLAY IN OUTER SUBQUERY) ...