[HOWTO] Domain Admin rights in Zimbra OSE 8.x

[prabin]

Hello,

Is it possible to allow the domain admin to only list the account and change the account password? But admin should not be allowed to create a new account.

Regards,
Prabin

Yes, you can. Just read and test the grants in the OP..

ccelis

I tried deleting a few lines in the script that is used to grand normal user domain admin, but it didn't work. Can you please guide me through this.

Thanking you in advance.

[ccelis5215]

Try this

Code: Select all

zmprov ca delegated@domain.com 12345678 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
zmprov grr domain domain.com usr delegated@domain.com +changeAccountPassword
zmprov grr domain domain.com usr delegated@domain.com countAccount
zmprov grr domain domain.com usr delegated@domain.com -createAccount
zmprov grr domain domain.com usr delegated@domain.com -modifyAccount
zmprov grr domain domain.com usr delegated@domain.com -renameAccount
zmprov grr domain domain.com usr delegated@domain.com -deleteAccount
zmprov grr domain domain.com usr delegated@domain.com +setAccountPassword
zmprov grr domain domain.com usr delegated@domain.com -setAdminConsoleAccountsInfoTab
zmprov grr domain domain.com usr delegated@domain.com adminConsoleSavedSearchRights
zmprov grr domain domain.com usr delegated@domain.com adminConsoleAccountRights

ccelis

[prabin]

Try this

Code: Select all

zmprov ca delegated@domain.com 12345678 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
zmprov grr domain domain.com usr delegated@domain.com +changeAccountPassword
zmprov grr domain domain.com usr delegated@domain.com countAccount
zmprov grr domain domain.com usr delegated@domain.com -createAccount
zmprov grr domain domain.com usr delegated@domain.com -modifyAccount
zmprov grr domain domain.com usr delegated@domain.com -renameAccount
zmprov grr domain domain.com usr delegated@domain.com -deleteAccount
zmprov grr domain domain.com usr delegated@domain.com +setAccountPassword
zmprov grr domain domain.com usr delegated@domain.com -setAdminConsoleAccountsInfoTab
zmprov grr domain domain.com usr delegated@domain.com adminConsoleSavedSearchRights
zmprov grr domain domain.com usr delegated@domain.com adminConsoleAccountRights

ccelis

Thank You very much. Really appreciate your help.

[prabin]

Try this

Code: Select all

zmprov ca delegated@domain.com 12345678 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
zmprov grr domain domain.com usr delegated@domain.com +changeAccountPassword
zmprov grr domain domain.com usr delegated@domain.com countAccount
zmprov grr domain domain.com usr delegated@domain.com -createAccount
zmprov grr domain domain.com usr delegated@domain.com -modifyAccount
zmprov grr domain domain.com usr delegated@domain.com -renameAccount
zmprov grr domain domain.com usr delegated@domain.com -deleteAccount
zmprov grr domain domain.com usr delegated@domain.com +setAccountPassword
zmprov grr domain domain.com usr delegated@domain.com -setAdminConsoleAccountsInfoTab
zmprov grr domain domain.com usr delegated@domain.com adminConsoleSavedSearchRights
zmprov grr domain domain.com usr delegated@domain.com adminConsoleAccountRights

ccelis

Thank You very much. Really appreciate your help.

Hello,

Sorry for disturbing you again.
Just one query.
Is it possible to revoke the rights that we had assigned previously? If yes can you please provide me the way.

Thanking you in advance.

[ccelis5215]

Just...

Code: Select all

zmprov ma delegated@comain.com zimbraIsDelegatedAdminAccount FALSE

ccelis

[prabin]

Just...

Code: Select all

zmprov ma delegated@comain.com zimbraIsDelegatedAdminAccount FALSE

ccelis

Thank You

[gogegota]

hi

i have an issue, already tried that script and running it, but i can't login on admin console using that account, how should i check what is wrong, any suggestion ?



thx