Difference between revisions of "Creating a delegated admin to manage Accounts distribution list and Aliases on a domain"

(Created page with "===<h1>Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain</h1>=== <hr> <br> <h2>Problem:</h2> What are the steps to create a delegated...")
 
Line 5: Line 5:
 
<h2>Problem:</h2>
 
<h2>Problem:</h2>
  
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. Also apply restiction this admin should not able to create a new delegated admin account and group.
+
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. <br>
 +
Also apply restriction, this admin should not be able to create a new delegated admin account and group.  
  
 
<h2>Solution:</h2>
 
<h2>Solution:</h2>
  
  zmprov ca DELEGATED-ADMIN@DOMAIN.COM z1mbr4 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
+
1). Create delegated admin account with required AdminConsole UI component.
 +
  zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
 +
 
 +
 
 +
2). Now assign following grants.
 
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
 
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
 
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
 
  zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
Line 25: Line 30:
  
 
'''Note:'''
 
'''Note:'''
Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
+
Replace '''DELEGATED-ADMIN''' and '''DOMAIN.COM''' with the actual Admin user and '''DOMAIN''' name.
 
 
  
  
"Heera Singh"
 
  
<hsingh@zimbra.com>
+
Submitted by: Heera Singh Koranga

Revision as of 06:30, 19 August 2017

Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain



Problem:

What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias.
Also apply restriction, this admin should not be able to create a new delegated admin account and group.

Solution:

1). Create delegated admin account with required AdminConsole UI component.

zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView


2). Now assign following grants.

zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminConsoleRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM adminConsoleAliasRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM modifyAccount
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM countAlias
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -configureAdminUI
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.account.zimbraAdminConsoleUIComponents
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.dl.zimbraAdminConsoleUIComponents
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.account.zimbraIsDelegatedAdminAccount
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.dl.zimbraIsAdminGroup

Note: Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.


Submitted by: Heera Singh Koranga

Jump to: navigation, search