Create a delegated admin to see account list only (Read-Only Admin): Difference between revisions
(Created page with "===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>=== <hr> <br> <h2>Problem</h2> What are the steps to create a delegated admin to see acc...") |
No edit summary |
||
(7 intermediate revisions by 4 users not shown) | |||
Line 1: | Line 1: | ||
== | {{BC|Certified}} | ||
__FORCETOC__ | |||
<div class="col-md-12 ibox-content"> | |||
=How to create a delegated admin who can view account list only (Read-Only Admin)= | |||
<hr> | <hr> | ||
{{KB|{{ZC}}|{{ZCS 8.8}}||||}} | |||
====Problem==== | |||
What are the steps to create a delegated admin who can view account list only (Read-Only admin). | |||
====Solution==== | |||
zmprov | * Create delegated admin account with the given required AdminConsole UI component : | ||
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights | * Now assign following grants : | ||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias | |||
'''Note:''' | |||
Replace '''ListAccount-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name. | |||
'''Heera Singh Koranga | {| class="wikitable" style="background-color:#d0f0c0;" cellpadding="10" | ||
|'''Submitted by''': Heera Singh Koranga | |||
|} | |||
{{Article Footer|ZCS 8.8|2020-04-13}} |
Latest revision as of 13:46, 23 May 2020
How to create a delegated admin who can view account list only (Read-Only Admin)
Problem
What are the steps to create a delegated admin who can view account list only (Read-Only admin).
Solution
- Create delegated admin account with the given required AdminConsole UI component :
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
- Now assign following grants :
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
Note:
Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Submitted by: Heera Singh Koranga |