[Samba] hide attributes from non-admins

[Christian]

Dear all,

is it possible on Samba AD to hide certain attributes (such as the home 
address etc) from all authenticated users and have only certain groups 
read and write that ? What would be the recommended way? Would it be 
different from Windows only AD? I have read about the confidential flag, 
about property sets, ... only to feel more confused. Thanks for any 
insights,

Christian