Creating a delegated admin to manage Accounts distribution list and Aliases on a domain: Difference between revisions
(Created page with "===<h1>Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain</h1>=== <hr> <br> <h2>Problem:</h2> What are the steps to create a delegated...") |
No edit summary |
||
Line 5: | Line 5: | ||
<h2>Problem:</h2> | <h2>Problem:</h2> | ||
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. Also apply | What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. <br> | ||
Also apply restriction, this admin should not be able to create a new delegated admin account and group. | |||
<h2>Solution:</h2> | <h2>Solution:</h2> | ||
zmprov ca DELEGATED-ADMIN@DOMAIN.COM | 1). Create delegated admin account with required AdminConsole UI component. | ||
zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView | |||
2). Now assign following grants. | |||
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs | zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs | ||
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights | zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights | ||
Line 25: | Line 30: | ||
'''Note:''' | '''Note:''' | ||
Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name. | Replace '''DELEGATED-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name. | ||
Submitted by: Heera Singh Koranga |
Revision as of 06:30, 19 August 2017
Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain
Problem:
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias.
Also apply restriction, this admin should not be able to create a new delegated admin account and group.
Solution:
1). Create delegated admin account with required AdminConsole UI component.
zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
2). Now assign following grants.
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminConsoleRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM adminConsoleAliasRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM modifyAccount zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM countAlias zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -configureAdminUI zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.account.zimbraAdminConsoleUIComponents zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.dl.zimbraAdminConsoleUIComponents zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.account.zimbraIsDelegatedAdminAccount zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.dl.zimbraIsAdminGroup
Note: Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Submitted by: Heera Singh Koranga