Results 1 to 6 of 6

Thread: [HOWTO] Domain Admin rights in Zimbra OSE 8.x

  1. #1
    vadonka is offline Active Member
    Join Date
    Nov 2011
    Location
    Hungary
    Posts
    30
    Rep Power
    3

    Lightbulb [HOWTO] Domain Admin rights in Zimbra OSE 8.x

    Hi guys!

    After trying some 3rd party domain admin software i decided try to figure out how can grant domain admin rights to a regular user in Zimbra OSE.
    Based on some google search here is my solution..

    1: Create a regular user belong to the manageable domain.
    2: Run this script from the command line with zimbra user (parameter 1: domain, parameter 2: domain admin email)
    (example: domain_right.sh domain.tld domainadmin@domain.tld)

    Code:
    #!/bin/bash
    
    # $1 domain
    # $2 email
    
    zmprov ma $2 zimbraIsDelegatedAdminAccount TRUE
    zmprov ma $2 zimbraAdminConsoleUIComponents cartBlancheUI zimbraAdminConsoleUIComponents domainListView zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents DLListView
    zmprov ma $2 zimbraDomainAdminMaxMailQuota 0
    zmprov grantRight domain $1 usr $2 +createAccount
    zmprov grantRight domain $1 usr $2 +createAlias
    zmprov grantRight domain $1 usr $2 +createCalendarResource
    zmprov grantRight domain $1 usr $2 +createDistributionList
    zmprov grantRight domain $1 usr $2 +deleteAlias
    zmprov grantRight domain $1 usr $2 +listDomain
    zmprov grantRight domain $1 usr $2 +domainAdminRights
    zmprov grantRight domain $1 usr $2 +configureQuota
    zmprov grantRight domain $1 usr $2 set.account.zimbraAccountStatus
    zmprov grantRight domain $1 usr $2 set.account.sn
    zmprov grantRight domain $1 usr $2 set.account.displayName
    zmprov grantRight domain $1 usr $2 set.account.zimbraPasswordMustChange
    zmprov grantRight account $2 usr $2 +deleteAccount
    zmprov grantRight account $2 usr $2 +getAccountInfo
    zmprov grantRight account $2 usr $2 +getAccountMembership
    zmprov grantRight account $2 usr $2 +getMailboxInfo
    zmprov grantRight account $2 usr $2 +listAccount
    zmprov grantRight account $2 usr $2 +removeAccountAlias
    zmprov grantRight account $2 usr $2 +renameAccount
    zmprov grantRight account $2 usr $2 +setAccountPassword
    zmprov grantRight account $2 usr $2 +viewAccountAdminUI
    zmprov grantRight account $2 usr $2 +configureQuota
    Working perfectly fine with Zimbra OSE 8.x
    Even the quota changing working properly

    The domain admin user only can see their own domain and nothing else, but can be administrate everything belong that domain.

  2. #2
    andrys is offline Starter Member
    Join Date
    Sep 2013
    Posts
    1
    Rep Power
    1

    Default

    Thnx @vadonka , it's great work for me on zimbra Ubuntu Server

  3. #3
    minhhoang is offline Intermediate Member
    Join Date
    Jun 2013
    Location
    Vietnam
    Posts
    24
    Rep Power
    2

    Default

    Thank you Vadonka so much! This is wonderful tip. Work perfect on Centos 6.4 + Zimra 8.3.

  4. #4
    harbirghai is offline Starter Member
    Join Date
    Jun 2011
    Posts
    1
    Rep Power
    4

    Default

    Quote Originally Posted by minhhoang View Post
    Thank you Vadonka so much! This is wonderful tip. Work perfect on Centos 6.4 + Zimra 8.3.



    Excellent.... The Stats Service is not enabled for this user, so it gives an error while logging. How can we settle this issue for the domain designated admin?

    BR
    Harbir Ghai

  5. #5
    ccelis5215 is offline Elite Member
    Join Date
    Jun 2011
    Location
    Caracas Venezuela
    Posts
    461
    Rep Power
    4

    Default

    Quote Originally Posted by harbirghai View Post
    Excellent.... The Stats Service is not enabled for this user, so it gives an error while logging. How can we settle this issue for the domain designated admin?
    Just add

    Code:
    zmprov grantRight global usr account@domain.com +getServiceStatus
    ccelis

  6. #6
    oczek is offline Junior Member
    Join Date
    Dec 2011
    Posts
    7
    Rep Power
    3

    Default

    Good work!

    Where can i find all zimbraAdminConsoleUIComponents?

    I find only a file delegatedadmin.txt, where it was writen:
    "TODO: document the list of all admin console UI components."

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Cannot assign domain admin rights to older accounts
    By Nicholas.Comeau in forum Administrators
    Replies: 0
    Last Post: 01-22-2013, 01:48 PM
  2. Replies: 0
    Last Post: 05-07-2012, 01:31 AM
  3. Replies: 0
    Last Post: 11-05-2009, 11:50 PM
  4. Domain admin has lost rights after 6.0.1 upgrade
    By iain in forum Administrators
    Replies: 1
    Last Post: 10-22-2009, 02:47 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •