[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
vadonka
Posts: 31
Joined: Sat Sep 13, 2014 2:20 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby vadonka » Tue Sep 17, 2013 7:31 am

Hi guys!
After trying some 3rd party domain admin software i decided try to figure out how can grant domain admin rights to a regular user in Zimbra OSE.

Based on some google search here is my solution..
1: Create a regular user belong to the manageable domain.

2: Run this script from the command line with zimbra user (parameter 1: domain, parameter 2: domain admin email)

(example: domain_right.sh domain.tld domainadmin@domain.tld)


#!/bin/bash
# $1 domain

# $2 email
zmprov ma $2 zimbraIsDelegatedAdminAccount TRUE

zmprov ma $2 zimbraAdminConsoleUIComponents cartBlancheUI zimbraAdminConsoleUIComponents domainListView zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents DLListView

zmprov ma $2 zimbraDomainAdminMaxMailQuota 0

zmprov grantRight domain $1 usr $2 +createAccount

zmprov grantRight domain $1 usr $2 +createAlias

zmprov grantRight domain $1 usr $2 +createCalendarResource

zmprov grantRight domain $1 usr $2 +createDistributionList

zmprov grantRight domain $1 usr $2 +deleteAlias

zmprov grantRight domain $1 usr $2 +listDomain

zmprov grantRight domain $1 usr $2 +domainAdminRights

zmprov grantRight domain $1 usr $2 +configureQuota

zmprov grantRight domain $1 usr $2 set.account.zimbraAccountStatus

zmprov grantRight domain $1 usr $2 set.account.sn

zmprov grantRight domain $1 usr $2 set.account.displayName

zmprov grantRight domain $1 usr $2 set.account.zimbraPasswordMustChange

zmprov grantRight account $2 usr $2 +deleteAccount

zmprov grantRight account $2 usr $2 +getAccountInfo

zmprov grantRight account $2 usr $2 +getAccountMembership

zmprov grantRight account $2 usr $2 +getMailboxInfo

zmprov grantRight account $2 usr $2 +listAccount

zmprov grantRight account $2 usr $2 +removeAccountAlias

zmprov grantRight account $2 usr $2 +renameAccount

zmprov grantRight account $2 usr $2 +setAccountPassword

zmprov grantRight account $2 usr $2 +viewAccountAdminUI

zmprov grantRight account $2 usr $2 +configureQuota


Working perfectly fine with Zimbra OSE 8.x

Even the quota changing working properly
The domain admin user only can see their own domain and nothing else, but can be administrate everything belong that domain.


andrys
Posts: 1
Joined: Sat Sep 13, 2014 3:21 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby andrys » Wed Sep 25, 2013 11:15 pm

Thnx @vadonka , it's great work for me on zimbra Ubuntu Server
minhhoang
Posts: 28
Joined: Sat Sep 13, 2014 3:14 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby minhhoang » Wed Nov 13, 2013 10:19 pm

Thank you Vadonka so much! This is wonderful tip. Work perfect on Centos 6.4 + Zimra 8.3.
harbirghai
Posts: 1
Joined: Sat Sep 13, 2014 2:03 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby harbirghai » Tue Jan 21, 2014 1:07 am

[quote user="minhhoang"]Thank you Vadonka so much! This is wonderful tip. Work perfect on Centos 6.4 + Zimra 8.3.[/QUOTE]



Excellent.... The Stats Service is not enabled for this user, so it gives an error while logging. How can we settle this issue for the domain designated admin?
BR

Harbir Ghai
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 608
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.0.9.GA.6191.UBUNTU12.64 FOSS

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby ccelis5215 » Tue Jan 21, 2014 6:08 pm

[quote user="harbirghai"]Excellent.... The Stats Service is not enabled for this user, so it gives an error while logging. How can we settle this issue for the domain designated admin?

[/QUOTE]
Just add
zmprov grantRight global usr account@domain.com +getServiceStatus

ccelis
oczek
Posts: 7
Joined: Sat Sep 13, 2014 2:21 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby oczek » Wed Jan 22, 2014 4:15 am

Good work!
Where can i find all zimbraAdminConsoleUIComponents?
I find only a file delegatedadmin.txt, where it was writen:

"TODO: document the list of all admin console UI components."
alarentis
Posts: 14
Joined: Sat Sep 13, 2014 1:58 am

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby alarentis » Wed Aug 19, 2015 6:31 am

with zimbra user:

zmprov gar -c ALL
Ahmad Faizal Abdul Latif
Posts: 17
Joined: Sun Feb 02, 2014 9:10 pm

[HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby Ahmad Faizal Abdul Latif » Sat Sep 12, 2015 10:13 pm

Hi Sir,



i make changes as per below. however, i can see the Description under notes are greyed out. and we cannot change the description. is there anyway we can enabled that?



thanks
prabin
Posts: 6
Joined: Thu Jun 06, 2019 10:56 am

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby prabin » Thu Jun 06, 2019 11:01 am

Hello,

Is it possible to allow the domain admin to only list the account and change the account password? But admin should not be allowed to create a new account.

Regards,
Prabin
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 608
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.0.9.GA.6191.UBUNTU12.64 FOSS

Re: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

Postby ccelis5215 » Thu Jun 06, 2019 12:34 pm

prabin wrote:Hello,

Is it possible to allow the domain admin to only list the account and change the account password? But admin should not be allowed to create a new account.

Regards,
Prabin


Yes, you can. Just read and test the grants in the OP..

ccelis

Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot], MSN [Bot] and 4 guests