Difference between revisions of "Create a delegated admin to see account list only (Read-Only Admin)"

(Create a delegated admin to see account list only (Read-Only Admin))
Line 2: Line 2:
 
__FORCETOC__
 
__FORCETOC__
 
<div class="col-md-12 ibox-content">
 
<div class="col-md-12 ibox-content">
=Create a delegated admin to see account list only (Read-Only Admin)=
+
=How to create a delegated admin who can view account list only (Read-Only Admin)=
 
<hr>
 
<hr>
 
{{KB|{{ZC}}|{{ZCS 8.8}}||||}}  
 
{{KB|{{ZC}}|{{ZCS 8.8}}||||}}  
Line 10: Line 10:
 
====Problem====
 
====Problem====
  
What are the steps to create a delegated admin to see account list only(Read-Only admin).
+
What are the steps to create a delegated admin who can view account list only(Read-Only admin).
  
 
====Solution====
 
====Solution====
  
* Create delegated admin account with required AdminConsole UI component.
+
* Create delegated admin account with the given required AdminConsole UI component :
 
  zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
 
  zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
  
* Now assign following grants.
+
* Now assign following grants :
 
  zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
 
  zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
 
  zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
 
  zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword

Revision as of 06:56, 15 May 2020

How to create a delegated admin who can view account list only (Read-Only Admin)


   KB 23350        Last updated on 2020-05-15  




0.00
(0 votes)


Problem

What are the steps to create a delegated admin who can view account list only(Read-Only admin).

Solution

  • Create delegated admin account with the given required AdminConsole UI component :
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
  • Now assign following grants :
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias


Note: Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.


Submitted by: Heera Singh Koranga
Verified Against: ZCS 8.8 Date Created: 2020-04-13
Article ID: https://wiki.zimbra.com/index.php?title=Create_a_delegated_admin_to_see_account_list_only_(Read-Only_Admin) Date Modified: 2020-05-15



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search