Is there a way to make a limited admin account?

[Arcomm]

Hello, we have a customer who is concerned about Administrators having View access to their E-Mail. Is there a way to make an Administrator account that is not able to view other users' mail? Alternatively, is there a way to set an account so that it cannot be viewed by an Administrator? Thank you.

[Arcomm]

I'm still waiting on a reply on this issue. Thank you.

[bdial]

If you are using the network edition you can, check out

How Delegated Administration Rights are Granted

If you're using the open source edition you can't

[sgros]

What is the exact scenario? Customer is outsourcing administraton, or, customer is outsourcing the whole mail system?

In the first case it's hard, in the second it's impossible to restrict administrator's rights since, by definition, an administrator has to have access to the whole system. But, even if an mail administrator is restricted, someone has to have access if nothing else to restrict administrator itself. In the end, system administrator can access mails via filesystem.

Anyway, if the customer is concerned with the privacy of his mails then the only solution is to use encryption, either PGP or S/MIME.

My $.02

[Dirk]

As bdial mentions, it is indeed possible with the Network Edition, it just takes a little thinking. There's a lot of settings that need to be set.

Basically you have an administrator user, which will be the server administrator, and then you have domain admins, which can be set admin rights over specific domains, and you can tune that level of access too.

[Arcomm]

Originally Posted by sgros

What is the exact scenario? Customer is outsourcing administraton, or, customer is outsourcing the whole mail system?

In the first case it's hard, in the second it's impossible to restrict administrator's rights since, by definition, an administrator has to have access to the whole system. But, even if an mail administrator is restricted, someone has to have access if nothing else to restrict administrator itself. In the end, system administrator can access mails via filesystem.

Anyway, if the customer is concerned with the privacy of his mails then the only solution is to use encryption, either PGP or S/MIME.

My $.02

Outsourcing administration. They are using ZCS 5.0.7 Network Edition, and just don't want their administrative employees to have access to E-Mail that contains payroll information. Thank you. I'll check the link that Bdial posted.

[Arcomm]

Originally Posted by bdial

If you are using the network edition you can, check out

How Delegated Administration Rights are Granted

If you're using the open source edition you can't

Ah, that is for 6.0.4. Will it work for 5.0.7?