Difference between revisions of "Create a delegated admin to see account list only (Read-Only Admin)"

(Created page with "===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>=== <hr> <br> <h2>Problem</h2> What are the steps to create a delegated admin to see acc...")
 
 
(7 intermediate revisions by 4 users not shown)
Line 1: Line 1:
===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>===
+
{{BC|Certified}}
 +
__FORCETOC__
 +
<div class="col-md-12 ibox-content">
 +
=How to create a delegated admin who can view account list only (Read-Only Admin)=
 
<hr>
 
<hr>
<br>
+
{{KB|{{ZC}}|{{ZCS 8.8}}||||}}
  
<h2>Problem</h2>
 
  
What are the steps to create a delegated admin to see account list only(Read-Only admin).
+
====Problem====
  
<h2>Solution</h2>
+
What are the steps to create a delegated admin who can view account list only (Read-Only admin).
<pre>
 
zmprov ca ListAccount-ADMIN@DOMAIN.COM PASSWORD zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
 
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
+
====Solution====
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
+
* Create delegated admin account with the given required AdminConsole UI component :
 +
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
+
* Now assign following grants :
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
 +
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
 
  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
+
'''Note:'''
 
+
Replace '''ListAccount-ADMIN'''  and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name.  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
 
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
 
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
 
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
 
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
 
 
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
 
</pre>
 
  
'''Note:'''
 
Replace ListAccount-ADMIN  and DOMAIN.COM with the actual Admin user and DOMAIN name.
 
  
  
'''Heera Singh Koranga'''
+
{| class="wikitable" style="background-color:#d0f0c0;" cellpadding="10"
 +
|'''Submitted by''':  Heera Singh Koranga
 +
|}
  
hsingh@zimbra.com
+
{{Article Footer|ZCS 8.8|2020-04-13}}

Latest revision as of 13:46, 23 May 2020

How to create a delegated admin who can view account list only (Read-Only Admin)


   KB 23350        Last updated on 2020-05-23  




0.00
(0 votes)


Problem

What are the steps to create a delegated admin who can view account list only (Read-Only admin).

Solution

  • Create delegated admin account with the given required AdminConsole UI component :
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
  • Now assign following grants :
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias


Note: Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.


Submitted by: Heera Singh Koranga
Verified Against: ZCS 8.8 Date Created: 2020-04-13
Article ID: https://wiki.zimbra.com/index.php?title=Create_a_delegated_admin_to_see_account_list_only_(Read-Only_Admin) Date Modified: 2020-05-23



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search