Retricting admin access to specific domains

[jveenstra]

Is there a way to restrict particular administrators to certain domains?

We are a HSP and have a need to prohibit certain system administrators from accessing certain domains. Particularly the ability to view users emails.

Your help is appreciated.

[uxbod]

What ZCS version are you running ?

su - zimbra
zmcontrol -v

Please update your profile as it helps to see whether NE or FOSS edition

[jveenstra]

Release 5.0.11_GA_2695.UBUNTU6 UBUNTU6 NETWORK edition

[uxbod]

Make them a Domain Administrator instead if on NE ?

[jveenstra]

If they are a domain admin, they can only administer the domain they are in, correct? i.e. admin1@mydomain.com could only administer users in mydomain.com

What I'd like is for user admin1@mydomain.com to be able to administer the domains customerdomain1.com customerdomain2.com, but not mydomain.com or customerdomain3.com.

Is it possible to provision an administrator in this way?

[jveenstra]

I spent a week looking for an answer. Figures I'd find something as soon as I posted to the forum.

This is covered in two RFE's in bugzilla.

5254 Domain Admin can own multiple domains
6965 Domain groups

It looks like I can't do what I'm asking, though I'm still open to suggestions if anybody has one.

[Klug]

Create (and share 8))) your own external administration panel, based on the language you prefer (PHP, perl, Ruby, whatever)...

This panel would use SOAP for all the administrations (SOAP to ZCS) while having its own userbase (sysadmin, domain admin, etc) and own users rights.