Page 2 of 2

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Thu Jun 06, 2019 3:33 pm
by prabin
ccelis5215 wrote:
prabin wrote:Hello,

Is it possible to allow the domain admin to only list the account and change the account password? But admin should not be allowed to create a new account.

Regards,
Prabin


Yes, you can. Just read and test the grants in the OP..

ccelis



I tried deleting a few lines in the script that is used to grand normal user domain admin, but it didn't work. Can you please guide me through this.

Thanking you in advance.

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Thu Jun 06, 2019 8:30 pm
by ccelis5215
Try this

Code: Select all

zmprov ca delegated@domain.com 12345678 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
zmprov grr domain domain.com usr delegated@domain.com +changeAccountPassword
zmprov grr domain domain.com usr delegated@domain.com countAccount
zmprov grr domain domain.com usr delegated@domain.com -createAccount
zmprov grr domain domain.com usr delegated@domain.com -modifyAccount
zmprov grr domain domain.com usr delegated@domain.com -renameAccount
zmprov grr domain domain.com usr delegated@domain.com -deleteAccount
zmprov grr domain domain.com usr delegated@domain.com +setAccountPassword
zmprov grr domain domain.com usr delegated@domain.com -setAdminConsoleAccountsInfoTab
zmprov grr domain domain.com usr delegated@domain.com adminConsoleSavedSearchRights
zmprov grr domain domain.com usr delegated@domain.com adminConsoleAccountRights


ccelis

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Fri Jun 07, 2019 4:58 am
by prabin
ccelis5215 wrote:Try this

Code: Select all

zmprov ca delegated@domain.com 12345678 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
zmprov grr domain domain.com usr delegated@domain.com +changeAccountPassword
zmprov grr domain domain.com usr delegated@domain.com countAccount
zmprov grr domain domain.com usr delegated@domain.com -createAccount
zmprov grr domain domain.com usr delegated@domain.com -modifyAccount
zmprov grr domain domain.com usr delegated@domain.com -renameAccount
zmprov grr domain domain.com usr delegated@domain.com -deleteAccount
zmprov grr domain domain.com usr delegated@domain.com +setAccountPassword
zmprov grr domain domain.com usr delegated@domain.com -setAdminConsoleAccountsInfoTab
zmprov grr domain domain.com usr delegated@domain.com adminConsoleSavedSearchRights
zmprov grr domain domain.com usr delegated@domain.com adminConsoleAccountRights


ccelis


Thank You very much. Really appreciate your help.

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Mon Jun 10, 2019 7:25 am
by prabin
prabin wrote:
ccelis5215 wrote:Try this

Code: Select all

zmprov ca delegated@domain.com 12345678 zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents accountListView
zmprov grr domain domain.com usr delegated@domain.com +changeAccountPassword
zmprov grr domain domain.com usr delegated@domain.com countAccount
zmprov grr domain domain.com usr delegated@domain.com -createAccount
zmprov grr domain domain.com usr delegated@domain.com -modifyAccount
zmprov grr domain domain.com usr delegated@domain.com -renameAccount
zmprov grr domain domain.com usr delegated@domain.com -deleteAccount
zmprov grr domain domain.com usr delegated@domain.com +setAccountPassword
zmprov grr domain domain.com usr delegated@domain.com -setAdminConsoleAccountsInfoTab
zmprov grr domain domain.com usr delegated@domain.com adminConsoleSavedSearchRights
zmprov grr domain domain.com usr delegated@domain.com adminConsoleAccountRights


ccelis


Thank You very much. Really appreciate your help.



Hello,

Sorry for disturbing you again.
Just one query.
Is it possible to revoke the rights that we had assigned previously? If yes can you please provide me the way.

Thanking you in advance.

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Mon Jun 10, 2019 2:37 pm
by ccelis5215
Just...

Code: Select all

zmprov ma delegated@comain.com zimbraIsDelegatedAdminAccount FALSE

ccelis

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Tue Jun 11, 2019 2:45 am
by prabin
ccelis5215 wrote:Just...

Code: Select all

zmprov ma delegated@comain.com zimbraIsDelegatedAdminAccount FALSE

ccelis



Thank You

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Posted: Tue Jun 11, 2019 2:29 pm
by gogegota
hi

i have an issue, already tried that script and running it, but i can't login on admin console using that account, how should i check what is wrong, any suggestion ?



thx