Multiple admin in the same domain

[sebastieng]

Hello,
i would like to know if it is possible to allow an administrator to manage only specific mailboxes in a domain ?

The final goal is to have only 1 domain, with 3 administrators, with only 1 "super admin" able to manage every mailboxes (ie : CEO / CFO ones), and the other admins could only manage some mailboxes.

If possible, each admin could create mailboxes into the domain, and be the only one able to manage them (and the super admin).

Thanks for your help.

Regards,
Sebastien.


--
ZCS Release 7.1.1_GA_3196.UBUNTU10_64 UBUNTU10_64 NETWORK edition

[dipeshmehta]

Check Delegated Administration chapter in Zimbra NE Admin Guide.
http://www.zimbra.com/docs/ne/latest...istration.html

[sebastieng]

Thanks for your help.

While doing the setup with multiple delegated admin, I think we have discovered a bug.

It seems that when you add an alias to a user account, it bypass user rights set on a distribution list that includes this specific user.

To make things clear, here is the setup :

- Domain
-- DL 1
--- User 1
---- Alias 1

Admin 1 has :
- domainAdminAccountRight on domain
- domainAdminAccountRight on DL1

Admin 2 has :
- domainAdminAccountRight on domain
- NO domainAdminAccountRight on DL1

With this setup, Admin 1 can manage user in DL1. Admin 2 cannot manage user in DL2, thanks to the no domainAdminAccountRight on DL1.

If we add an alias to User 1, then, admin 2 can manage user 1.

It seems that the deny permission is bypassed there.

Can anyone reproduce this issue and / or help us to fix that ?

Thanks.
Sebastien

[sebastieng]

One more thing.
It seems that the combo right domainAdminAccountRight does not include listAccount when denied.

Ie : we need to add the listAccount as denied for an admin, in addition to the no domainAdminAccountRight.

Maybe i'm missing something, but it seems weird.