Difference between revisions of "Create a delegated admin to see account list only (Read-Only Admin)"

(Created page with "===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>=== <hr> <br> <h2>Problem</h2> What are the steps to create a delegated admin to see acc...")
 
Line 1: Line 1:
===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>===
+
===<h1>Create a delegated admin to see account list only (Read-Only Admin)</h1>===
 
<hr>
 
<hr>
 
<br>
 
<br>
Line 8: Line 8:
  
 
<h2>Solution</h2>
 
<h2>Solution</h2>
<pre>
 
zmprov ca ListAccount-ADMIN@DOMAIN.COM PASSWORD zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
 
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
+
1). Create delegated admin account with required AdminConsole UI component.
 +
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
 
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
+
2). Now assign following grants.
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
 
</pre>
 
  
 
'''Note:'''
 
'''Note:'''
Replace ListAccount-ADMIN  and DOMAIN.COM with the actual Admin user and DOMAIN name.  
+
Replace '''ListAccount-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name.  
  
  
'''Heera Singh Koranga'''
 
  
hsingh@zimbra.com
+
Submitted by: Heera Singh Koranga

Revision as of 23:15, 19 August 2017

Create a delegated admin to see account list only (Read-Only Admin)



Problem

What are the steps to create a delegated admin to see account list only(Read-Only admin).

Solution

1). Create delegated admin account with required AdminConsole UI component.

zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView


2). Now assign following grants.

zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias


Note: Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.


Submitted by: Heera Singh Koranga

Jump to: navigation, search