Create a delegated admin to see account list only (Read-Only Admin): Difference between revisions

(Created page with "===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>=== <hr> <br> <h2>Problem</h2> What are the steps to create a delegated admin to see acc...")
 
No edit summary
 
(7 intermediate revisions by 4 users not shown)
Line 1: Line 1:
===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>===
{{BC|Certified}}
__FORCETOC__
<div class="col-md-12 ibox-content">
=How to create a delegated admin who can view account list only (Read-Only Admin)=
<hr>
<hr>
<br>
{{KB|{{ZC}}|{{ZCS 8.8}}||||}}


<h2>Problem</h2>


What are the steps to create a delegated admin to see account list only(Read-Only admin).
====Problem====


<h2>Solution</h2>
What are the steps to create a delegated admin who can view account list only (Read-Only admin).
<pre>
zmprov ca ListAccount-ADMIN@DOMAIN.COM PASSWORD zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView


zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
====Solution====


zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
* Create delegated admin account with the given required AdminConsole UI component :
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView


zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
* Now assign following grants :
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias


zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership


zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
'''Note:'''
 
Replace '''ListAccount-ADMIN'''  and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name.  
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
 
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
</pre>


'''Note:'''
Replace ListAccount-ADMIN  and DOMAIN.COM with the actual Admin user and DOMAIN name.




'''Heera Singh Koranga'''
{| class="wikitable" style="background-color:#d0f0c0;" cellpadding="10"
|'''Submitted by''':  Heera Singh Koranga
|}


hsingh@zimbra.com
{{Article Footer|ZCS 8.8|2020-04-13}}

Latest revision as of 13:46, 23 May 2020

  1. Zimbra Tech Center
  2. Certified
  3. Create a delegated admin to see account list only (Read-Only Admin)

How to create a delegated admin who can view account list only (Read-Only Admin)

   KB 23350        Last updated on 2020-05-23  




0.00
(0 votes)


Problem

What are the steps to create a delegated admin who can view account list only (Read-Only admin).

Solution

  • Create delegated admin account with the given required AdminConsole UI component :
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
  • Now assign following grants :
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias


Note: Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.


Submitted by: Heera Singh Koranga
Verified Against: ZCS 8.8 Date Created: 2020-04-13
Article ID: https://wiki.zimbra.com/index.php?title=Create_a_delegated_admin_to_see_account_list_only_(Read-Only_Admin) Date Modified: 2020-05-23



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Other help Resources

User Help Page »
Official Forums »
Zimbra Documentation Page »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Retrieved from "http://wiki.zimbra.com/index.php?title=Create_a_delegated_admin_to_see_account_list_only_(Read-Only_Admin)&oldid=67252"
Jump to: navigation, search