3 separation zones - admin, partner, customer