Create a delegated admin to see account list only (Read-Only Admin): Difference between revisions
No edit summary |
|||
Line 2: | Line 2: | ||
__FORCETOC__ | __FORCETOC__ | ||
<div class="col-md-12 ibox-content"> | <div class="col-md-12 ibox-content"> | ||
= | =How to create a delegated admin who can view account list only (Read-Only Admin)= | ||
<hr> | <hr> | ||
{{KB|{{ZC}}|{{ZCS 8.8}}||||}} | {{KB|{{ZC}}|{{ZCS 8.8}}||||}} | ||
Line 10: | Line 10: | ||
====Problem==== | ====Problem==== | ||
What are the steps to create a delegated admin | What are the steps to create a delegated admin who can view account list only(Read-Only admin). | ||
====Solution==== | ====Solution==== | ||
* Create delegated admin account with required AdminConsole UI component | * Create delegated admin account with the given required AdminConsole UI component : | ||
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView | zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView | ||
* Now assign following grants | * Now assign following grants : | ||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount | zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount | ||
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword | zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword |
Revision as of 06:56, 15 May 2020
How to create a delegated admin who can view account list only (Read-Only Admin)
- This article is a Work in Progress, and may be unfinished or missing sections.
Problem
What are the steps to create a delegated admin who can view account list only(Read-Only admin).
Solution
- Create delegated admin account with the given required AdminConsole UI component :
zmprov ca ListAccount-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
- Now assign following grants :
zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -deleteAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -changeAccountPassword zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM adminConsoleAccountRights zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -getAccountMembership zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -addAccountAlias zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM countAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -modifyAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -createAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -renameAccount zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -setAccountPassword zmprov grr domain DOMAIN.COM usr ListAccount-ADMIN@DOMAIN.COM -removeAccountAlias
Note:
Replace ListAccount-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Submitted by: Heera Singh Koranga |