I wanted to tenant off Zabbix for multiple private environments. And with that comes security and visibility of neighboring information.

Steps to reproduce:

1. Create host groups intended for private tenancy and segregated permission sets of hosts - TenantA/hosts  TenantB/Hosts etc
2. Have multiple zabbix proxy hosts configured. ( in scenario, proxy-A, Proxy-B etc)
3. Elevate one user from private tenant A to Zabbix Administrator in order to be able to create hosts
4. Zabbix Administrator with permissions to hosts:
   1. ALL - NON
   2. TenantA = READ/WRITE

Result:
When creating a host, in allowed host group, the user can see all other configured Zabbix proxy servers.

Ideal outcome:
Restrictions on Zabbix proxy visibility when creating hosts , relative to  to host groups in order to show/hide based on permissions sets.

Tenant A, adding a host, should only see Tenant A Zabbix proxy or no proxy , or have this forced on the user somehow to their proxy , if applicable.