[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
vadonka
Posts: 31
Joined: Sat Sep 13, 2014 2:20 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by vadonka »

Hi guys!
After trying some 3rd party domain admin software i decided try to figure out how can grant domain admin rights to a regular user in Zimbra OSE.

Based on some google search here is my solution..
1: Create a regular user belong to the manageable domain.

2: Run this script from the command line with zimbra user (parameter 1: domain, parameter 2: domain admin email)

(example: domain_right.sh domain.tld domainadmin@domain.tld)


#!/bin/bash
# $1 domain

# $2 email
zmprov ma $2 zimbraIsDelegatedAdminAccount TRUE

zmprov ma $2 zimbraAdminConsoleUIComponents cartBlancheUI zimbraAdminConsoleUIComponents domainListView zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents DLListView

zmprov ma $2 zimbraDomainAdminMaxMailQuota 0

zmprov grantRight domain $1 usr $2 +createAccount

zmprov grantRight domain $1 usr $2 +createAlias

zmprov grantRight domain $1 usr $2 +createCalendarResource

zmprov grantRight domain $1 usr $2 +createDistributionList

zmprov grantRight domain $1 usr $2 +deleteAlias

zmprov grantRight domain $1 usr $2 +listDomain

zmprov grantRight domain $1 usr $2 +domainAdminRights

zmprov grantRight domain $1 usr $2 +configureQuota

zmprov grantRight domain $1 usr $2 set.account.zimbraAccountStatus

zmprov grantRight domain $1 usr $2 set.account.sn

zmprov grantRight domain $1 usr $2 set.account.displayName

zmprov grantRight domain $1 usr $2 set.account.zimbraPasswordMustChange

zmprov grantRight account $2 usr $2 +deleteAccount

zmprov grantRight account $2 usr $2 +getAccountInfo

zmprov grantRight account $2 usr $2 +getAccountMembership

zmprov grantRight account $2 usr $2 +getMailboxInfo

zmprov grantRight account $2 usr $2 +listAccount

zmprov grantRight account $2 usr $2 +removeAccountAlias

zmprov grantRight account $2 usr $2 +renameAccount

zmprov grantRight account $2 usr $2 +setAccountPassword

zmprov grantRight account $2 usr $2 +viewAccountAdminUI

zmprov grantRight account $2 usr $2 +configureQuota


Working perfectly fine with Zimbra OSE 8.x

Even the quota changing working properly
The domain admin user only can see their own domain and nothing else, but can be administrate everything belong that domain.
andrys
Posts: 1
Joined: Sat Sep 13, 2014 3:21 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by andrys »

Thnx @vadonka , it's great work for me on zimbra Ubuntu Server
minhhoang
Posts: 28
Joined: Sat Sep 13, 2014 3:14 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by minhhoang »

Thank you Vadonka so much! This is wonderful tip. Work perfect on Centos 6.4 + Zimra 8.3.
harbirghai
Posts: 1
Joined: Sat Sep 13, 2014 2:03 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by harbirghai »

[quote user="minhhoang"]Thank you Vadonka so much! This is wonderful tip. Work perfect on Centos 6.4 + Zimra 8.3.[/QUOTE]



Excellent.... The Stats Service is not enabled for this user, so it gives an error while logging. How can we settle this issue for the domain designated admin?
BR

Harbir Ghai
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 632
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.8.15.GA.3869.UBUNTU18.64 P12

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by ccelis5215 »

[quote user="harbirghai"]Excellent.... The Stats Service is not enabled for this user, so it gives an error while logging. How can we settle this issue for the domain designated admin?

[/QUOTE]
Just add
zmprov grantRight global usr account@domain.com +getServiceStatus
ccelis
oczek
Posts: 7
Joined: Sat Sep 13, 2014 2:21 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by oczek »

Good work!
Where can i find all zimbraAdminConsoleUIComponents?
I find only a file delegatedadmin.txt, where it was writen:

"TODO: document the list of all admin console UI components."
alarentis
Posts: 14
Joined: Sat Sep 13, 2014 1:58 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by alarentis »

with zimbra user:

zmprov gar -c ALL
Ahmad Faizal Abdul Latif
Posts: 17
Joined: Sun Feb 02, 2014 9:10 pm

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by Ahmad Faizal Abdul Latif »

Hi Sir,



i make changes as per below. however, i can see the Description under notes are greyed out. and we cannot change the description. is there anyway we can enabled that?



thanks
prabin
Posts: 7
Joined: Thu Jun 06, 2019 10:56 am

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by prabin »

Hello,

Is it possible to allow the domain admin to only list the account and change the account password? But admin should not be allowed to create a new account.

Regards,
Prabin
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 632
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.8.15.GA.3869.UBUNTU18.64 P12

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Post by ccelis5215 »

prabin wrote:Hello,

Is it possible to allow the domain admin to only list the account and change the account password? But admin should not be allowed to create a new account.

Regards,
Prabin
Yes, you can. Just read and test the grants in the OP..

ccelis
Post Reply