Zones are visible to end users. This is important because this is how users are allowed to choose which zone they wish to create their virtual instances in. A public zone is visible to all users, but private zones can also be created that are then only available to members of a particular domain and its associated subdomains. This is in fact, how multitenancy can be implemented using CloudStack.