Ajcody-How-To-Setup-sendOnBehalfOf-Right-And-Persona-For-Internal-Users: Difference between revisions
m (Ajcody moved page Ajcody-To-Setup-sendOnBehalfOf-Right-And-Persona-For-Internal-Users to Ajcody-How-To-Setup-sendOnBehalfOf-Right-And-Persona-For-Internal-Users without leaving a redirect) |
|
(No difference)
|
Revision as of 22:16, 23 November 2013
Article Information |
---|
This article applies to the following ZCS versions. |
How To Setup A sendOnBehalfOf Right and Persona For Internal Users
The following How-to only applies to ZCS 8 and greater
Actual How To Setup A sendOnBehalfOf Right and Persona For Internal Users Home Page
Please see: Ajcody-To-Setup-sendOnBehalfOf-Right-And-Persona-For-Internal-Users
Warning - Must Reload Browsers To See Changes When Changing Rights
When you make changes that effects the rights the account has, they will not automatically show up in the user's ZWC session. You must reload the browser session - either by doing a logout/login or by "refreshing" the browser. Refreshing the browser might require it's "Refresh" that it offers or by clicking in the URL field and hitting enter.
Creating Initial Test Accounts
Login as the zimbra user:
su - zimbra
Create Three Test Accounts. Note, not all of these test account might be used for this particular wiki how-to :
[zimbra@]$ zmprov ca 1-sendas@test.com STRONG_PASSWORD 9c16e165-09f0-4155-92e6-59df3a9f4609 [zimbra@]$ zmprov ca 2-sendas@test.com STRONG_PASSWORD 8690ce69-d2e0-4ab0-83e8-040f88c290c3 [zimbra@]$ zmprov ca 3-sendOnBehalfOf@test.com STRONG_PASSWORD deceeb15-ca0c-4868-9a6f-2f208ac36708
Create An Alias For The Account 1-sendas@
Create An Alias For One Of Our Users:
[zimbra@]$ zmprov aaa 1-sendas@test.com 1-sendas-alias@test.com
Configuring The Primary User Account - 1-sendas@ - To Use The Alias - 1-sendas-alias@ - Setup A Persona
Login to ZWC as the user [1-sendas@test.com] either directly or by the admin consoles "View Mail" option. You should notice that the alias is not available as an option to select in the From field and that you don't have a drop down to change the From field. This is because the alias was just setup to be used for email redirection when we did it above. To allow the user to send email also as the alias, you can setup a Persona to show this option in the From field.
- Click Add Persona
- Persona Name = 1-sendas-alias
- From: set to 1-sendas-alias@test.com
- Reply-to: set to 1-sendas-alias@test.com
- Use this persona: When replying or forwarding messages sent to: 1-sendas-alias@test.com
- Click the Save button at the upper left.
Now reload/refresh the browse to see changes. When you compose a new message now, you should see the alias as an option from the drop down box that's offered from the From field.
If the option is not there, log out of ZWC and log back in.
Granting The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account
This section will grant 3-sendOnBehalfOf@ to send messages as 1-sendas@ .
First, grant the right to 3-sendOnBehalfOf@ for the 1-sendas@ account [option 1]:
[zimbra@]$ zmmailbox -z -m 1-sendas@test.com grr account 3-sendOnBehalfOf@test.com sendOnBehalfOf granted: account 3-sendOnBehalfOf@test.com sendAs
Or you can grant the right to 3-sendOnBehalfOf@ for the 1-sendas@ account [option 2]:
[zimbra@]$ zmprov grr account 1-sendas@test.com usr 3-sendOnBehalfOf@test.com sendOnBehalfOf
To confirm the grants that 1-sendas@ has allowed, do:
[zimbra@zcs804 ~]$ zmprov gg -t account 1-sendas@test.com target type target id target name grantee type ------------ ------------------------------------ ----------------- ------------ account 55a3d686-bd61-4608-a4a3-0027f5aee6ff 1-sendas@test.com usr grantee id grantee name right ------------------------------------ ------------------------- ------ deceeb15-ca0c-4868-9a6f-2f208ac36708 3-sendonbehalfof@test.com sendOnBehalfOf
To confirm 3-sendonbehalfof@ can send on behalf of 1-sendas@ , log into ZWC with the 3-sendonbehalfof@ account or reload the browser session if you were already logged in as 3-sendonbehalfof@. You should now see the following when you compose a new message:
You should also be able to setup a persona under 3-sendonbehalfof@ for the 1-sendas@test.com email address.
1-sendas@ User Giving And Viewing Of The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account In 1-sendas@ ZWC Preferences
You can see the sendonbehalfof rights that an account have given or been set for in the users Preferences > Accounts - "The following users have delegated authority to this account" area in ZWC. The user can also add the sendonbehalfof rights here, it is listed under the Primary Account selection :
View Of The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account In The Admin Console
A screen shot of the admin console of the changes we made above via the CLI
Granting The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account's Alias 1-sendas-alias@ Address
If an account has multiple addresses it needs to share out, these additional steps are necessary for the accounts that are NOT its primary email address - for example, an alias.
First, when adding these additional accounts, you DO NOT set the grant like you did to the primary email address of the account. Attempting to use the alias, for example, will not work.
[zimbra@]$ zmmailbox -z -m 1-sendas-alias@test.com grr account 3-sendonbehalfof@test.com sendOnBehalfOf granted no right
No right was granted above because grants are actually set to the primary account, not the alias.
Another key point to remember when an account needs to grant any of the sendonbehalfof rights for multiple email addresses it manages [aliases for example], it must also set ALL of its sendOnBehalfOf addresses in the zimbraPrefAllowAddressForDelegatedSender variable. If an account is only granting the sendOnBehalfOf rights to its primary email address, then this variable will be blank by default and can be left blank. Example of the value prior to setting the sendOnBehalfOf grant will look like:
[zimbra@]$ zmprov ga 1-sendas@test.com zimbraPrefAllowAddressForDelegatedSender # name 1-sendas@test.com
Remember, we have already granted 3-sendOnBehalfOf@test.com sendOnBehalfOf rights to 1-sendas@test.com in our prior steps and confirm 3-sendOnBehalfOf@ can send emails as 1-sendas@ .
To include the additional email address that 1-sendas@ has for 3-sendOnBehalfOf@ to send messages as, do the following.
Set the primary email address in the zimbraPrefAllowAddressForDelegatedSender value:
zmprov ma 1-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender 1-sendas@test.com
Now add the alias also:
zmprov ma 1-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender 1-sendas-alias@test.com
Confirm the changes:
[zimbra@]$ zmprov ga 1-sendas@test.com zimbraPrefAllowAddressForDelegatedSender # name 1-sendas@test.com zimbraPrefAllowAddressForDelegatedSender: 1-sendas-alias@test.com zimbraPrefAllowAddressForDelegatedSender: 1-sendas@test.com
Reload the browser session for 3-sendOnBehalfOf@ and you'll now see: