Results 1 to 7 of 7

Thread: Retricting admin access to specific domains

  1. #1
    Join Date
    Jan 2008
    Location
    St. Louis, MO
    Posts
    5
    Rep Power
    7

    Default Retricting admin access to specific domains

    Is there a way to restrict particular administrators to certain domains?

    We are a HSP and have a need to prohibit certain system administrators from accessing certain domains. Particularly the ability to view users emails.

    Your help is appreciated.

  2. #2
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    What ZCS version are you running ?
    Code:
    su - zimbra
    zmcontrol -v
    Please update your profile as it helps to see whether NE or FOSS edition

  3. #3
    Join Date
    Jan 2008
    Location
    St. Louis, MO
    Posts
    5
    Rep Power
    7

    Default

    Release 5.0.11_GA_2695.UBUNTU6 UBUNTU6 NETWORK edition

  4. #4
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    Make them a Domain Administrator instead if on NE ?

  5. #5
    Join Date
    Jan 2008
    Location
    St. Louis, MO
    Posts
    5
    Rep Power
    7

    Default

    If they are a domain admin, they can only administer the domain they are in, correct? i.e. admin1@mydomain.com could only administer users in mydomain.com

    What I'd like is for user admin1@mydomain.com to be able to administer the domains customerdomain1.com customerdomain2.com, but not mydomain.com or customerdomain3.com.

    Is it possible to provision an administrator in this way?

  6. #6
    Join Date
    Jan 2008
    Location
    St. Louis, MO
    Posts
    5
    Rep Power
    7

    Default

    I spent a week looking for an answer. Figures I'd find something as soon as I posted to the forum.

    This is covered in two RFE's in bugzilla.

    5254 Domain Admin can own multiple domains
    6965 Domain groups

    It looks like I can't do what I'm asking, though I'm still open to suggestions if anybody has one.

  7. #7
    Join Date
    Mar 2006
    Location
    Beaucaire, France
    Posts
    2,322
    Rep Power
    13

    Default

    Create (and share 8))) your own external administration panel, based on the language you prefer (PHP, perl, Ruby, whatever)...

    This panel would use SOAP for all the administrations (SOAP to ZCS) while having its own userbase (sysadmin, domain admin, etc) and own users rights.

Similar Threads

  1. Replies: 42
    Last Post: 01-29-2010, 12:03 AM
  2. Date/time update killed admin account access
    By tenpagyatso in forum Installation
    Replies: 2
    Last Post: 07-01-2008, 10:26 AM
  3. [SOLVED] Admin for specific domain
    By slacker in forum Administrators
    Replies: 5
    Last Post: 07-01-2008, 08:19 AM
  4. Allow single account to be domain admin over multiple domains
    By peter@mxtoolbox.com in forum Administrators
    Replies: 2
    Last Post: 03-19-2008, 01:36 PM
  5. Can not access admin console after 5.0.2 upgrade
    By wolrah in forum Administrators
    Replies: 22
    Last Post: 02-28-2008, 09:34 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •