"Failed to grant the ACL: system failure: attribute adminConsoleDomainRights is not o

[benvm]

I try to granting rights at the attribute level allow a delegated admin group to view a specific attribute (domain) on a target.


Here are the steps what i did:

1. Create Admin group (Click New - Select Administrator - Select Admin Group.., and then following the default settings).

2. Highlight the zadmin group under Distribution Lists - Click Configure Grants - Click Add (ACE window popup).

Grantee Name: zadmin@example.com
Target Type: domain
Target Name: example.com
Right Type: Attribute Right
Attribute Right Verb: Read
Attribute Right Target Type: domain
Attribute Name: adminConsoleDomainRights
Right Name: get.domain.adminConsoleDomainRights

Click Add and Finish button

Somehow, it keeps popping up a window with the following messages

"Failed to grant the ACL: system failure: attribute adminConsoleDomainRights is not on domain.



Regards,
Ben.

[brian]

adminConsoleDomainRights is a system defined right, not an zimbra configuration attribute. If you want to assign adminConsoleDomainRights to zadmin@example.com for target domain example.com you need to select "System Defined Right" under Right Type.

[benvm]

I have no problem when select "System Defined Right" to assign adminConsoleDomainRights to admin group. Unfortunately, the admin group will have a full access (rw) of that domain. Just want to give admin group "READ" access only.

My question is how to find a right "Attribute Name" to assign admin group in this case.


Regards,
Ben.

[benvm]

Can anyone help me with this issue?

Regards,
Ben.