Email access restriction.

Team, there's a client request for providing a cPanel account to the company's IT team to create emails for new employees and change passwords. However, they don't want this team to have access to the inbox of existing accounts. Is it possible to create an option where these accounts don't have access to the inbox of existing accounts?

The accounts would only have access to the existing rules, but without being able to access the inboxes of the accounts. They can only create, change passwords, suspend, etc.

Thanks