Creating a delegated admin to manage Accounts, distribution list and Aliases on a domain
Step 1
Create delegated admin account with required AdminConsole UI component.
zmprov ca DELEGATED-ADMIN@DOMAIN.COM <PASSWORD> zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents downloadsView zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView
Step 2
Now assign following grants.
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM adminLoginCalendarResourceAs
zmprov grr global usr DELEGATED-ADMIN@DOMAIN.COM domainAdminZimletRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM domainAdminConsoleRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM adminConsoleAliasRights
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM modifyAccount
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM countAlias
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -configureAdminUI
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.account.zimbraAdminConsoleUIComponents
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -get.dl.zimbraAdminConsoleUIComponents
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.account.zimbraIsDelegatedAdminAccount
zmprov grr domain DOMAIN.COM usr DELEGATED-ADMIN@DOMAIN.COM -set.dl.zimbraIsAdminGroup
Note: Replace DELEGATED-ADMIN and DOMAIN.COM with the actual Admin user and DOMAIN name.
Comments
Post a Comment