Creating a delegated admin to manage Accounts distribution list and Aliases on a domain: Difference between revisions

(Created page with "===<h1>Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain</h1>=== <hr> <br> <h2>Problem:</h2> What are the steps to create a delegated...")
 
No edit summary
Line 5: Line 5:
<h2>Problem:</h2>
<h2>Problem:</h2>


What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. Also apply restiction this admin should not able to create a new delegated admin account and group.
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. <br>
Also apply restriction, this admin should not be able to create a new delegated admin account and group.  


<h2>Solution:</h2>
<h2>Solution:</h2>


  zmprov ca DELEGATED-ADMIN@DOMAIN.COM z1mbr4 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
1). Create delegated admin account with required AdminConsole UI component.
  zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
 
 
2). Now assign following grants.
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
Line 25: Line 30:


'''Note:'''
'''Note:'''
Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Replace '''DELEGATED-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name.
 




"Heera Singh"


<hsingh@zimbra.com>
Submitted by: Heera Singh Koranga

Revision as of 06:30, 19 August 2017

Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain



Problem:

What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias.
Also apply restriction, this admin should not be able to create a new delegated admin account and group.

Solution:

1). Create delegated admin account with required AdminConsole UI component.

zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView


2). Now assign following grants.

zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminConsoleRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM adminConsoleAliasRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM modifyAccount
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM countAlias
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -configureAdminUI
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.account.zimbraAdminConsoleUIComponents
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.dl.zimbraAdminConsoleUIComponents
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.account.zimbraIsDelegatedAdminAccount
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.dl.zimbraIsAdminGroup

Note: Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.


Submitted by: Heera Singh Koranga

Jump to: navigation, search