Revision as of 22:29, 7 June 2016 by Ajcody (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Admin Article

Article Information

This article applies to the following ZCS versions.

ZCS 8.0 Article ZCS 8.0

How To Setup A sendOnBehalfOf Right and Persona For Internal Users

The following How-to only applies to ZCS 8 and greater

Actual How To Setup A sendOnBehalfOf Right and Persona For Internal Users Home Page

Please see: Ajcody-How-To-Setup-sendOnBehalfOf-Right-And-Persona-For-Internal-Users

Warning - Must Reload Browsers To See Changes When Changing Rights

When you make changes that effects the rights the account has, they will not automatically show up in the user's ZWC session. You must reload the browser session - either by doing a logout/login or by "refreshing" the browser. Refreshing the browser might require it's "Refresh" that it offers or by clicking in the URL field and hitting enter.


Creating Initial Test Accounts

Login as the zimbra user:

su - zimbra

Create Three Test Accounts. Note, not all of these test account might be used for this particular wiki how-to :

[zimbra@]$ zmprov ca 1-sendas@test.com STRONG_PASSWORD

[zimbra@]$ zmprov ca 2-sendas@test.com STRONG_PASSWORD

[zimbra@]$ zmprov ca 3-sendOnBehalfOf@test.com STRONG_PASSWORD

Create An Alias For The Account 1-sendas@

Create An Alias For One Of Our Users:

[zimbra@]$ zmprov aaa 1-sendas@test.com 1-sendas-alias@test.com

Configuring The Primary User Account - 1-sendas@ - To Use The Alias - 1-sendas-alias@ - Setup A Persona

Note: To set up persona's from the cli, see :

zmprov help command| grep -i identit
createIdentity(cid) {name@domain} {identity-name} [attr1 value1 [attr2 value2...]]
deleteIdentity(did) {name@domain|id} {identity-name}
getIdentities(gid) {name@domain|id} [arg1 [arg...]]
modifyIdentity(mid) {name@domain|id} {identity-name} [attr1 value1 [attr2 value2...]]

Login to ZWC as the user [1-sendas@test.com] either directly or by the admin consoles "View Mail" option. You should notice that the alias is not available as an option to select in the From field and that you don't have a drop down to change the From field. This is because the alias was just setup to be used for email redirection when we did it above. To allow the user to send email also as the alias, you can setup a Persona to show this option in the From field.

  • Click Add Persona
  • Persona Name = 1-sendas-alias
  • From: set to 1-sendas-alias@test.com
  • Reply-to: set to 1-sendas-alias@test.com
  • Use this persona: When replying or forwarding messages sent to: 1-sendas-alias@test.com
  • Click the Save button at the upper left.


Now reload/refresh the browse to see changes. When you compose a new message now, you should see the alias as an option from the drop down box that's offered from the From field.


If the option is not there, log out of ZWC and log back in.

Granting The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account

This section will grant 3-sendOnBehalfOf@ to send messages as 1-sendas@ .

First, grant the right to 3-sendOnBehalfOf@ for the 1-sendas@ account [option 1]:

[zimbra@]$ zmmailbox -z -m 1-sendas@test.com grr account 3-sendOnBehalfOf@test.com sendOnBehalfOf
    account 3-sendOnBehalfOf@test.com sendAs

Or you can grant the right to 3-sendOnBehalfOf@ for the 1-sendas@ account [option 2]:

[zimbra@]$ zmprov grr account 1-sendas@test.com usr 3-sendOnBehalfOf@test.com sendOnBehalfOf

To confirm the grants that 1-sendas@ has allowed, do:

[zimbra@zcs804 ~]$ zmprov gg -t account 1-sendas@test.com
target type  target id                            target name        grantee type 
------------ ------------------------------------ -----------------  ------------ 
account      55a3d686-bd61-4608-a4a3-0027f5aee6ff 1-sendas@test.com  usr          

grantee id                           grantee name               right
------------------------------------ -------------------------  ------
deceeb15-ca0c-4868-9a6f-2f208ac36708 3-sendonbehalfof@test.com  sendOnBehalfOf

To confirm 3-sendonbehalfof@ can send on behalf of 1-sendas@ , log into ZWC with the 3-sendonbehalfof@ account or reload the browser session if you were already logged in as 3-sendonbehalfof@. You should now see the following when you compose a new message:


You should also be able to setup a persona under 3-sendonbehalfof@ for the 1-sendas@test.com email address.

1-sendas@ User Giving And Viewing Of The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account In 1-sendas@ ZWC Preferences

You can see the sendOnBehalfOf rights that an account have given or been set for in the users Preferences > Accounts - "The following users have delegated authority to this account" area in ZWC. The user can also add the sendOnBehalfOf rights here, it is listed under the Primary Account selection :


View Of The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account In The Admin Console

A screen shot of the admin console of the changes we made above via the CLI


Granting The sendOnBehalfOf Right To 3-sendOnBehalfOf@ For The 1-sendas@ Account's Alias 1-sendas-alias@ Address

If an account has multiple addresses it needs to share out, these additional steps are necessary for the accounts that are NOT its primary email address - for example, an alias.

First, when adding these additional accounts, you DO NOT set the grant like you did to the primary email address of the account. Attempting to use the alias, for example, will not work.

[zimbra@]$ zmmailbox -z -m 1-sendas-alias@test.com grr account 3-sendonbehalfof@test.com sendOnBehalfOf
  granted no right

No right was granted above because grants are actually set to the primary account, not the alias.

Another key point to remember when an account needs to grant any of the sendonbehalfof rights for multiple email addresses it manages [aliases for example], it must also set ALL of its sendOnBehalfOf addresses in the zimbraPrefAllowAddressForDelegatedSender variable. If an account is only granting the sendOnBehalfOf rights to its primary email address, then this variable will be blank by default and can be left blank. Example of the value prior to setting the sendOnBehalfOf grant will look like:

[zimbra@]$ zmprov ga 1-sendas@test.com zimbraPrefAllowAddressForDelegatedSender
# name 1-sendas@test.com

Remember, we have already granted 3-sendOnBehalfOf@test.com sendOnBehalfOf rights to 1-sendas@test.com in our prior steps and confirm 3-sendOnBehalfOf@ can send emails as 1-sendas@ .

To include the additional email address that 1-sendas@ has for 3-sendOnBehalfOf@ to send messages as, do the following.

Set the primary email address in the zimbraPrefAllowAddressForDelegatedSender value:

zmprov ma 1-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender 1-sendas@test.com

Now add the alias also:

zmprov ma 1-sendas@test.com +zimbraPrefAllowAddressForDelegatedSender 1-sendas-alias@test.com

Confirm the changes:

[zimbra@]$ zmprov ga 1-sendas@test.com zimbraPrefAllowAddressForDelegatedSender
# name 1-sendas@test.com
zimbraPrefAllowAddressForDelegatedSender: 1-sendas-alias@test.com
zimbraPrefAllowAddressForDelegatedSender: 1-sendas@test.com

Reload the browser session for 3-sendOnBehalfOf@ and you'll now see:


Jump to: navigation, search