Difference between revisions of "Creating a delegated admin to manage Accounts distribution list and Aliases on a domain"
Line 1: | Line 1: | ||
− | == | + | {{BC|Certified}} |
+ | __FORCETOC__ | ||
+ | <div class="col-md-12 ibox-content"> | ||
+ | =Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain= | ||
<hr> | <hr> | ||
− | + | {{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|{{ZCS 8.5}}|}} | |
+ | {{WIP}} | ||
− | |||
− | What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. | + | ====Problem==== |
+ | What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias. | ||
+ | |||
Also apply restriction, this admin should not be able to create a new delegated admin account and group. | Also apply restriction, this admin should not be able to create a new delegated admin account and group. | ||
− | + | ====Solution==== | |
− | 1 | + | =====Step 1===== |
+ | Create delegated admin account with required AdminConsole UI component. | ||
zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView | zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView | ||
− | 2 | + | =====Step 2===== |
+ | Now assign following grants. | ||
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs | zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs | ||
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights | zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights | ||
Line 34: | Line 41: | ||
− | Submitted by: Heera Singh Koranga | + | {| class="wikitable" style="background-color:#d0f0c0;" cellpadding="10" |
+ | |'''Submitted by''': Heera Singh Koranga | ||
+ | |} | ||
+ | |||
+ | {{Article Footer||}} |
Revision as of 00:30, 21 August 2018
Contents
Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain
- This article is a Work in Progress, and may be unfinished or missing sections.
Problem
What are the steps to create a delegated admin with feature to create/delete/modify account, distribution list, alias.
Also apply restriction, this admin should not be able to create a new delegated admin account and group.
Solution
Step 1
Create delegated admin account with required AdminConsole UI component.
zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
Step 2
Now assign following grants.
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminConsoleRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM adminConsoleAliasRights zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM modifyAccount zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM countAlias zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -configureAdminUI zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.account.zimbraAdminConsoleUIComponents zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.dl.zimbraAdminConsoleUIComponents zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.account.zimbraIsDelegatedAdminAccount zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.dl.zimbraIsAdminGroup
Note: Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Submitted by: Heera Singh Koranga |