Create a delegated admin to see account list only (Read-Only Admin): Difference between revisions
(Created page with "===<h1>Steps to create a delegated admin to see account list only READ-ONLY MODE</h1>=== <hr> <br> <h2>Problem</h2> What are the steps to create a delegated admin to see acc...") |
No edit summary |
||
| Line 1: | Line 1: | ||
===<h1> | ===<h1>Create a delegated admin to see account list only (Read-Only Admin)</h1>=== | ||
<hr> | <hr> | ||
<br> | <br> | ||
| Line 8: | Line 8: | ||
<h2>Solution</h2> | <h2>Solution</h2> | ||
zmprov | 1). Create delegated admin account with required AdminConsole UI component. | ||
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights | 2). Now assign following grants. | ||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword | |||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias | |||
'''Note:''' | '''Note:''' | ||
Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name. | Replace '''ListAccount-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name. | ||
Submitted by: Heera Singh Koranga | |||
Revision as of 23:15, 19 August 2017
Create a delegated admin to see account list only (Read-Only Admin)
Problem
What are the steps to create a delegated admin to see account list only(Read-Only admin).
Solution
1). Create delegated admin account with required AdminConsole UI component.
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
2). Now assign following grants.
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
Note:
Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Submitted by: Heera Singh Koranga
