Delegated Admin can not create new Accounts

[deepblue]

Hi all,

we are currently planning an update of one of our Zimbra Servers from 6.0.12 (NE) to 7.1.1 patch 2 (NE).
As there are a lot of users on that machine I did some tests with 7.1.1.

What I found out is, that it seems to be impossible for a delegated admin to create new accounts in 7.1.1.
The delegated admin can modify existing accounts or delete existing accounts, but the button to
create new account is not existent.

I tested with a delegated admin who had the checkbox "Assign the default domain administrator view and rights"
enabled, as well as a delegated admin with a specific set of rights including the "domainADminRights", "createAccount"
and "domainADminCosRights". These Rights should be sufficient to create a new account...

Can sombody confirm this behavior? Is this a bug or a feature that I have not fully understood :-)

Regards
Thomas

[marnux]

Hello Thomas,

We are Running 7.1.1 at the moment and we are experiencing the same issue. Our domain admins cannot create new accounts because the button has disappeared. All the rights have been set and haven't been changed after the update.

I hope Zimbra will fix this bug soon.

[deepblue]

Originally Posted by marnux

Hello Thomas,

We are Running 7.1.1 at the moment and we are experiencing the same issue. Our domain admins cannot create new accounts because the button has disappeard. All the rights have been set and haven't been changed after de update.

I hope Zimbra will fix this bug soon.

It's not really a bug. In the Admin UI edit the account of the delgated admin, go to "Admin Views" and add "Domain List View" which is disabled by default. Then click on "Configure Grants" and make sure the user has the "listDomain" right on the domain level.

This should be enough for the delegated admin to create new accounts and dls.

Regards
Thomas

[eintel]

Originally Posted by deepblue

It's not really a bug. In the Admin UI edit the account of the delgated admin, go to "Admin Views" and add "Domain List View" which is disabled by default. Then click on "Configure Grants" and make sure the user has the "listDomain" right on the domain level.

This should be enough for the delegated admin to create new accounts and dls.

We have just come across this issue as well and I think it is a bug (in the upgrade scripts if nothing else).

If I understand you correctly, to fix this we have to go into every delegated admin account across all the domains we host & manually add the Domain List View right to each of them.

That is a royal pain to do manually across all the domains, is there any way to automate that process?

thanks
Ben Sommerville

[iggy]

Try:

zmprov ma adminaccount@domain.com +zimbraAdminConsoleUIComponents domainListView

[eintel]

Hi Iggy,

Thanks that worked

For anyone else who wants to do a bulk update, this script should work

#!/bin/sh

for user_name in `/opt/zimbra/bin/zmprov -l gaaa` ; do
        echo "$user_name"
        /opt/zimbra/bin/zmprov ma $user_name +zimbraAdminConsoleUIComponents domainListView
done

cheers
Ben