Difference between revisions of "Creating a delegated admin to manage Accounts distribution list and Aliases on a domain"
(Created page with "===<h1>Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain</h1>=== <hr> <br> <h2>Problem:</h2> What are the steps to create a delegated...") |
|||
| Line 5: | Line 5: | ||
<h2>Problem:</h2> | <h2>Problem:</h2> | ||
| − | What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. Also apply | + | What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. <br> |
| + | Also apply restriction, this admin should not be able to create a new delegated admin account and group. | ||
<h2>Solution:</h2> | <h2>Solution:</h2> | ||
| − | zmprov ca DELEGATED-ADMIN@DOMAIN.COM | + | 1). Create delegated admin account with required AdminConsole UI component. |
| + | zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView | ||
| + | |||
| + | |||
| + | 2). Now assign following grants. | ||
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs | zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs | ||
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights | zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights | ||
| Line 25: | Line 30: | ||
'''Note:''' | '''Note:''' | ||
| − | Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name. | + | Replace '''DELEGATED-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name. |
| − | |||
| − | |||
| − | + | Submitted by: Heera Singh Koranga | |
Revision as of 06:30, 19 August 2017
Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain
Problem:
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias.
Also apply restriction, this admin should not be able to create a new delegated admin account and group.
Solution:
1). Create delegated admin account with required AdminConsole UI component.
zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
2). Now assign following grants.
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminConsoleRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM adminConsoleAliasRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM modifyAccount zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM countAlias zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -configureAdminUI zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.account.zimbraAdminConsoleUIComponents zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.dl.zimbraAdminConsoleUIComponents zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.account.zimbraIsDelegatedAdminAccount zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.dl.zimbraIsAdminGroup
Note: Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Submitted by: Heera Singh Koranga
