Results 1 to 4 of 4

Thread: Multiple admin in the same domain

  1. #1
    Join Date
    Jul 2011
    Posts
    3
    Rep Power
    4

    Lightbulb Multiple admin in the same domain

    Hello,
    i would like to know if it is possible to allow an administrator to manage only specific mailboxes in a domain ?

    The final goal is to have only 1 domain, with 3 administrators, with only 1 "super admin" able to manage every mailboxes (ie : CEO / CFO ones), and the other admins could only manage some mailboxes.

    If possible, each admin could create mailboxes into the domain, and be the only one able to manage them (and the super admin).

    Thanks for your help.

    Regards,
    Sebastien.


    --
    ZCS Release 7.1.1_GA_3196.UBUNTU10_64 UBUNTU10_64 NETWORK edition

  2. #2
    Join Date
    Jun 2010
    Location
    Rajkot, India
    Posts
    160
    Rep Power
    5

    Default

    Check Delegated Administration chapter in Zimbra NE Admin Guide.
    http://www.zimbra.com/docs/ne/latest...istration.html

  3. #3
    Join Date
    Jul 2011
    Posts
    3
    Rep Power
    4

    Default

    Thanks for your help.

    While doing the setup with multiple delegated admin, I think we have discovered a bug.

    It seems that when you add an alias to a user account, it bypass user rights set on a distribution list that includes this specific user.

    To make things clear, here is the setup :

    - Domain
    -- DL 1
    --- User 1
    ---- Alias 1

    Admin 1 has :
    - domainAdminAccountRight on domain
    - domainAdminAccountRight on DL1

    Admin 2 has :
    - domainAdminAccountRight on domain
    - NO domainAdminAccountRight on DL1

    With this setup, Admin 1 can manage user in DL1. Admin 2 cannot manage user in DL2, thanks to the no domainAdminAccountRight on DL1.

    If we add an alias to User 1, then, admin 2 can manage user 1.

    It seems that the deny permission is bypassed there.

    Can anyone reproduce this issue and / or help us to fix that ?

    Thanks.
    Sebastien

  4. #4
    Join Date
    Jul 2011
    Posts
    3
    Rep Power
    4

    Default

    One more thing.
    It seems that the combo right domainAdminAccountRight does not include listAccount when denied.

    Ie : we need to add the listAccount as denied for an admin, in addition to the no domainAdminAccountRight.

    Maybe i'm missing something, but it seems weird.

Similar Threads

  1. multiple domain admin without global access?
    By bhwong in forum Administrators
    Replies: 4
    Last Post: 12-15-2010, 12:31 AM
  2. Allow single account to be domain admin over multiple domains
    By peter@mxtoolbox.com in forum Administrators
    Replies: 2
    Last Post: 03-19-2008, 01:36 PM
  3. Replies: 20
    Last Post: 03-18-2008, 06:37 AM
  4. Multiple domain problem
    By violentpurr in forum Administrators
    Replies: 0
    Last Post: 12-13-2007, 12:31 AM
  5. Replies: 5
    Last Post: 11-28-2007, 09:51 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •